Add (typeof window === 'undefined') check for trustedType

[licanhua]

Fix #7904

1. add (typeof window === 'undefined') for everywhere use trustedTypes
2. make unit test to use node environment instead of jsdom which will not have window object
3. bump up version with npx lerna version --force-publish --no-push --no-git-tag-version to make min version change

Microsoft Reviewers: Open in CodeFlow

[ghost]

Hi @licanhua. Thanks for helping make the AdaptiveCards JS renderer + tooling better. As additional verification, once the JS build succeeds, please go to the test site to test out your website/designer changes.

[tosmolka]

@licanhua , would it be possible to create deprecatedExportedFunctionPolicy before first use? Say host never uses truncate method. Now it still needs to allow it in trusted-types directive so that call .createPolicy() does not fail.

I would prefer if policies were only created when they are needed and used. The same should be also true for other TT policies, I did not check those.

[licanhua]

what's your concern, performance? I think the impact is ignorable.

If you are worried about that "window is undefined" when you import Adaptivecards, then a window object is added. I don't think it's a real use case.

I prefer to keep it simple at the beginning. otherwise, a new function should be added, and
I need to have ttDeprecatedPolicy to be undefined | null, then undefined means not initialized, and null means trusted-types are not supported.

let ttDeprecatedPolicy = undefined | null | PolicyType

function GetPolicy()
{
    if (ttDeprecatedPolicy === undefined) {
       ttDeprecatedPolicy  = null;
       if (typeof window == ....
   } 
}

[tosmolka]

@licanhua , my concern is that users of AC SDK now need to change trusted-types directive in their CSPs and allow adaptivecards#deprecatedExportedFunctionPolicy even when they are not using it. This goes against best practices to allow only policies that are needed.

[paulcam206]

approved, but please do consider my one comment :)