Add trusted types support

Makes the jasmine html reporter compatible with an enforced Trusted Types policy.

This should only be necessary for a limited time, as the next version of the proposed specification will not require any special code for URLS (except javascript: URLS).

More info about the proposed Trusted Types standard at https://github.com/WICG/trusted-type

src/html/HtmlReporter.js

@@ -1,4 +1,27 @@
 jasmineRequire.HtmlReporter = function(j$) {
+  // This is a no-op if not running with a Trusted Types CSP policy, and
+  // lets tests declare that they trust the way that jasmine creates URLs.
+  //
+  // More info about the proposed Trusted Types standard at
+  // https://github.com/WICG/trusted-types
+  var policy = {
+    createURL: function(s) {
+      return s;
+    }
+  };
+  var trustedTypes = window.trustedTypes || window.TrustedTypes;
+  if (trustedTypes) {
+    policy = trustedTypes.createPolicy('jasmine', policy);
+    if (!policy.createURL) {
+      // Install createURL for newer browsers. Only browsers that
+      //     implement an old version of the spec require createURL.
+      //     Should be safe to delete this policy entirely by
+      //     February 2020.
+      // https://github.com/WICG/trusted-types/pull/204
+      policy.createURL = function(s) { return s; };
+    }
+  }
+
   function ResultsStateBuilder() {
     this.topResults = new j$.ResultsNode({}, '', null);
     this.currentParent = this.topResults;
@@ -66,7 +89,7 @@ jasmineRequire.HtmlReporter = function(j$) {
           { className: 'jasmine-banner' },
           createDom('a', {
             className: 'jasmine-title',
-            href: 'http://jasmine.github.io/',
+            href: policy.createURL('http://jasmine.github.io/'),
             target: '_blank'
           }),
           createDom('span', { className: 'jasmine-version' }, j$.version)
@@ -183,7 +206,7 @@ jasmineRequire.HtmlReporter = function(j$) {
             { className: 'jasmine-bar jasmine-skipped' },
             createDom(
               'a',
-              { href: skippedLink, title: 'Run all specs' },
+              { href: policy.createURL(skippedLink), title: 'Run all specs' },
               skippedMessage
             )
           )
@@ -228,7 +251,7 @@ jasmineRequire.HtmlReporter = function(j$) {
             'a',
             {
               title: 'randomized with seed ' + order.seed,
-              href: seedHref(order.seed)
+              href: policy.createURL(seedHref(order.seed))
             },
             order.seed
           )
@@ -300,7 +323,10 @@ jasmineRequire.HtmlReporter = function(j$) {
             createDom('span', {}, 'Spec List | '),
             createDom(
               'a',
-              { className: 'jasmine-failures-menu', href: '#' },
+              {
+                className: 'jasmine-failures-menu',
+                href: policy.createURL('#')
+              },
               'Failures'
             )
           )
@@ -311,7 +337,10 @@ jasmineRequire.HtmlReporter = function(j$) {
             { className: 'jasmine-menu jasmine-bar jasmine-failure-list' },
             createDom(
               'a',
-              { className: 'jasmine-spec-list-menu', href: '#' },
+              {
+                className: 'jasmine-spec-list-menu',
+                href: policy.createURL('#')
+              },
               'Spec List'
             ),
             createDom('span', {}, ' | Failures ')
@@ -385,7 +414,7 @@ jasmineRequire.HtmlReporter = function(j$) {
               },
               createDom(
                 'a',
-                { href: specHref(resultNode.result) },
+                { href: policy.createURL(specHref(resultNode.result)) },
                 resultNode.result.description
               )
             )
@@ -421,7 +450,7 @@ jasmineRequire.HtmlReporter = function(j$) {
               },
               createDom(
                 'a',
-                { href: specHref(resultNode.result) },
+                { href: policy.createURL(specHref(resultNode.result)) },
                 specDescription
               )
             )
@@ -549,7 +578,10 @@ jasmineRequire.HtmlReporter = function(j$) {
         { className: 'jasmine-description' },
         createDom(
           'a',
-          { title: result.description, href: specHref(result) },
+          {
+            title: result.description,
+            href: policy.createURL(specHref(result))
+          },
           result.description
         )
       );
@@ -559,7 +591,7 @@ jasmineRequire.HtmlReporter = function(j$) {
         wrapper.insertBefore(createTextNode(' > '), wrapper.firstChild);
         suiteLink = createDom(
           'a',
-          { href: suiteHref(suite) },
+          { href: policy.createURL(suiteHref(suite)) },
           suite.result.description
         );
         wrapper.insertBefore(suiteLink, wrapper.firstChild);