diff --git a/index.html b/index.html
index 0cf4be39..71288aab 100644
--- a/index.html
+++ b/index.html
@@ -5,6 +5,7 @@
 		<meta name="viewport" content="width=device-width, initial-scale=1.0" />
 		<link rel="icon" type="image/svg+xml" href="data:" />
 		<link rel="stylesheet" href="reset.css" />
+		<meta http-equiv="Content-Security-Policy" content="require-trusted-types-for 'script'">
 		<title>dhtml</title>
 		<script type="module">
 			import { html } from './dist/index.js'
diff --git a/src/client/compiler.ts b/src/client/compiler.ts
index c2d96be4..33cb2b19 100644
--- a/src/client/compiler.ts
+++ b/src/client/compiler.ts
@@ -23,28 +23,42 @@ const DYNAMIC_GLOBAL = /dyn-\$(\d+)\$/g
 const FORCE_ATTRIBUTES = /-|^class$|^for$/i
 const NEEDS_UPPERCASING = /\$./g
 
+function createPolicy<T extends { createHTML(input: string, ...args: unknown[]): string }>(_name: string, rules: T): T {
+	return rules
+}
+
+declare var trustedTypes: { createPolicy: typeof createPolicy }
+
+const policy = (typeof trustedTypes === 'undefined' ? createPolicy : trustedTypes.createPolicy.bind(trustedTypes))(
+	'dhtml',
+	{
+		createHTML: (_text, statics: TemplateStringsArray) => {
+			let i = 0
+			return [...lexer.lex(statics)]
+				.map(([char, state]) => {
+					if (char === '\0') {
+						if (state === lexer.DATA) return `<!--dyn-$${i++}$-->`
+						else return `dyn-$${i++}$`
+					}
+					if (state === lexer.ATTR_NAME && char.toLowerCase() !== char) {
+						return `$${char}`
+					}
+					return char
+				})
+				.join('')
+		},
+	},
+)
+
 const templates: WeakMap<TemplateStringsArray, CompiledTemplate> = new WeakMap()
 export function compile_template(statics: TemplateStringsArray): CompiledTemplate {
 	const cached = templates.get(statics)
 	if (cached) return cached
 
 	const template_element = document.createElement('template')
-	let next_part = 0
-	template_element.innerHTML = [...lexer.lex(statics)]
-		.map(([char, state]) => {
-			if (char === '\0') {
-				if (state === lexer.DATA) return `<!--dyn-$${next_part++}$-->`
-				else return `dyn-$${next_part++}$`
-			}
-			if (state === lexer.ATTR_NAME && char.toLowerCase() !== char) {
-				return `$${char}`
-			}
-			return char
-		})
-		.join('')
-
-	next_part = 0
+	template_element.innerHTML = policy.createHTML('', statics)
 
+	let next_part = 0
 	const compiled: CompiledTemplate = {
 		_content: template_element.content,
 		_parts: Array(statics.length - 1),