Trusted Types Is Baseline: DOM XSS Is Now a Type Error

Every codebase has one. Somewhere in a component nobody has opened in eighteen months, there is a line that reads el.innerHTML = someValue, and nobody can tell you with confidence where someValue come