Google working on new Chrome security feature to 'obliterate DOM XSS'

Google announces Trusted Types browser API, a new defense against DOM-based XSS attacks.