Does GWT support CSP Trusted Types?

[Garima Jain]

Hi everyone,

We're trying to implement Trusted Types (require-trusted-types-for 'script') in a GWT 2.13 application as part of CSP hardening.

We created a default Trusted Types policy, but when Trusted Types is enforced, the application fails during startup because the GWT-generated bootstrap code triggers TrustedScript/TrustedScriptURL violations.

Has anyone successfully implemented Trusted Types with GWT? Is there any official support or recommended approach for this?

Thanks in advance!