{"version":3,"sources":["../../../src/client/trusted-types.ts"],"sourcesContent":["/**\n * Stores the Trusted Types Policy. Starts as undefined and can be set to null\n * if Trusted Types is not supported in the browser.\n */\nlet policy: TrustedTypePolicy | null | undefined\n\n/**\n * Getter for the Trusted Types Policy. If it is undefined, it is instantiated\n * here or set to null if Trusted Types is not supported in the browser.\n */\nfunction getPolicy() {\n  if (typeof policy === 'undefined' && typeof window !== 'undefined') {\n    policy =\n      window.trustedTypes?.createPolicy('nextjs', {\n        createHTML: (input) => input,\n        createScript: (input) => input,\n        createScriptURL: (input) => input,\n      }) || null\n  }\n\n  return policy\n}\n\n/**\n * Unsafely promote a string to a TrustedScriptURL, falling back to strings\n * when Trusted Types are not available.\n * This is a security-sensitive function; any use of this function\n * must go through security review. In particular, it must be assured that the\n * provided string will never cause an XSS vulnerability if used in a context\n * that will cause a browser to load and execute a resource, e.g. when\n * assigning to script.src.\n */\nexport function __unsafeCreateTrustedScriptURL(\n  url: string\n): TrustedScriptURL | string {\n  return getPolicy()?.createScriptURL(url) || url\n}\n"],"names":["policy","getPolicy","window","trustedTypes","createPolicy","createHTML","input","createScript","createScriptURL","__unsafeCreateTrustedScriptURL","url"],"mappings":"AAAA;;;CAGC,GACD,IAAIA;AAEJ;;;CAGC,GACD,SAASC;IACP,IAAI,OAAOD,WAAW,eAAe,OAAOE,WAAW,aAAa;QAClEF,SACEE,OAAOC,YAAY,EAAEC,aAAa,UAAU;YAC1CC,YAAY,CAACC,QAAUA;YACvBC,cAAc,CAACD,QAAUA;YACzBE,iBAAiB,CAACF,QAAUA;QAC9B,MAAM;IACV;IAEA,OAAON;AACT;AAEA;;;;;;;;CAQC,GACD,OAAO,SAASS,+BACdC,GAAW;IAEX,OAAOT,aAAaO,gBAAgBE,QAAQA;AAC9C","ignoreList":[0]}