tree 09dfede1118a10f5acc0d3a735e24526e15fa77a
parent a0f260c17f3f066b61fa707198e7790894d4b58e
author Nate Bosch <nbosch@google.com> 1638916961 -0800
committer GitHub <noreply@github.com> 1638916961 -0800
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJhr+NhCRBK7hj4Ov3rIwAAagYIAGWJHiSS1wqugShYw0JC6BVa
 PR7YSCK/BoczeUcjMLNhusMQkbUgYer+7w+s7gqB4GrTqpMXn2N9FJPJeOtJcfsj
 3sVQLblV37N0ERfDxpNRYN9a5D71D7arW3/a0dFEFY1kepjVXfI1EunhA4JclY0R
 EB8JxfxwdUS0k0dBl3z8W/oMo28b2nRZBVsevRnKzxT5uJwLFtJiPLkBHGG5k4Yf
 WN9iCIwNYoBQR0zOJBp/EeVWu08H85rtcxLwQx8k9djKACCyn4B73OOHkyaogBKk
 z+IRrDm7uVtQGXv/FTtyGsbXHphaPzYOPp0Sd8EiBzLEXc+KgsJCHynQROdIAcY=
 =cKUE
 -----END PGP SIGNATURE-----
 

Use trusted types for script URL (#1642)

Create a policy which appends the test extensions to the URL.
This does not make the script safer, but it does limit the security risk
to the code inside the `createPolicy` call which, in theory, should be
easier to review.