2026 07 26 13 59 [javascript] workaround Content-Security-Policy: require-trusted-types-for 'script'



<script>
    if (window.trustedTypes && window.trustedTypes.createPolicy) {
        window.trustedTypes.createPolicy('default', {
                            createHTML: string => string,
                            createScriptURL: string => string,
                            createScript: string => string,
        });
    }
</script>

Content-Security-Policy: require-trusted-types-for 'script'
​因為最近用AI寫html,常常遇到這個error.
需要加上上面的script繞過這個問題,
​但如果想要更嚴謹是需要把string => string​

​要改成檢查這個string沒問題後才放行.