Add Trusted Types support

[timneutkens]

Describe the feature you'd like to request

Backstory and initial implementation can be found here: #13509

Describe the solution you'd like

As mentioned in #13509 Trusted Types helps prevent XSS attack, we're planning to add support for it in Next.js natively so that there is a default configuration.

Someone from the Chrome team is going to start working on adding Trusted Types to Next.js early January.

[jgoping]

The pull request above is to add a tool called tsec to the linting process to check for Trusted Types violations. Going forward, I plan to create more pull requests to fix all of the violations detected by tsec. Also, tsec is not guaranteed to catch all violations, so I plan to find and fix violations that occur when running Next.js applications locally or from running unit/integration tests. After all of these violations are fixed, then application developers can choose to enforce Trusted Types without being blocked by the framework.

[samcx]

Moving this to discussions since this is a feature request.

[alexaka1]

Afaik React already supports Trusted Types: https://github.com/facebook/react/pull/16157/files

[alexaka1]

Hmm, so does Next?
#13509
No never mind, this was closed in favor of this issue, which was closed and demoted to a discussion. Catch 22.