If you have trusted types then… Google Chrome Team’s new API to help prevent Cross-Site Scripting - Trusted Types