Sanitizer API: HTML (streaming) setter methods

Description

This is an extension of the proposal in #1336 to cover the new HTML setters and streaming setter methods, and the integration with trusted types.

The Sanitizer API is providing a new method to modify HTML without causing XSS, which is one of the most prevalent security vulnerabilities in the world. In order for developers to be able to depend on these features it's necessary for them to be reliable cross-browser.

Note that, although this feature is an unmerged PR at the time of writing, we are confident it will be merged in plenty of time for Interop.

Specification

https://github.com/whatwg/html/pull/12753

web-feature

html-setters, html-streaming-setters

Test Links

• https://wpt.fyi/results/sanitizer-api?label=master&label=experimental&q=trustedtypes
• https://wpt.fyi/results/domparsing/tentative?label=master&label=experimental&aligned&q=domparsing (note there are current PRs to move these tests out of the tentative state when the spec changes are merged)

Additional Signals

No response

Start with the WHATWG HTML pull request 12753, then inspect the sanitizer-api and domparsing results linked from the issue, including tentative tests and trusted-types coverage. Identify the missing HTML setter and streaming setter cases, and finish when the relevant Web Platform Tests cover the specified behavior and are no longer blocked by the referenced spec changes.