Tagged literal for HTML. Interpolated values become text or attribute values, never markup. Values bound to href,
src, xlink:href, action, formaction and poster keep only http(s), blob, mailto, tel, data:image and relative URLs.
The static markup may not contain on… or srcdoc attributes, property bindings (.name=${…}), or script, style,
iframe, object, embed, base, meta, link and SMIL animation elements: use data-action for interaction.
Tagged literal for HTML. Interpolated values become text or attribute values, never markup. Values bound to href, src, xlink:href, action, formaction and poster keep only http(s), blob, mailto, tel, data:image and relative URLs. The static markup may not contain on… or srcdoc attributes, property bindings (.name=${…}), or script, style, iframe, object, embed, base, meta, link and SMIL animation elements: use data-action for interaction.