@lwrjs/client-modules 0.13.0-alpha.3 → 0.13.0-alpha.30

package/build/modules/lwr/lockerSandbox/lockerSandbox.js

@@ -1,7 +1,7 @@
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
  */
-var _URLCtor$prototype$LWS;
+var _TrustedHTMLCtor$prot$LWS, _TrustedScriptCtor$pr$LWS, _URLCtor$prototype$LWS;
 const {
   apply: ReflectApply$LWS$1,
   construct: ReflectConstruct$LWS,
@@ -301,6 +301,7 @@ function createUnmaskableTraps$LWS(func$LWS) {
   return {
     defineProperty(target$LWS, key$LWS, desc$LWS) {
       // Defining forgeries of handshake properties is not allowed.
+      // istanbul ignore else: it is unnecessary to cover the else path here
       if (key$LWS === LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS) {
         throw new TypeErrorCtor$LWS$1(ERR_ILLEGAL_PROPERTY_ACCESS$LWS);
       }
@@ -312,12 +313,14 @@ function createUnmaskableTraps$LWS(func$LWS) {
       // does NOT exist.
       handshakeUnmaskFlag$LWS && (handshakeUnmaskFlag$LWS = handshake$LWS);
       const isUnmaskedSymbol$LWS = key$LWS === LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS;
+      // istanbul ignore else: it is unnecessary to cover the else path here
       if (handshakeUnmaskFlag$LWS) {
         // Exit without performing a [[Get]] for
         // `LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL` properties
         // because we know that when the
         // `handshakeUnmaskFlag` is ON that
         // there are NO shadowed values.
+        // istanbul ignore else: it is unnecessary to cover the else path here
         if (isUnmaskedSymbol$LWS) {
           return func$LWS;
         }
@@ -325,6 +328,7 @@ function createUnmaskableTraps$LWS(func$LWS) {
       const result$LWS = ReflectGet$LWS(target$LWS, key$LWS, receiver$LWS);
       // Getting forged values of `LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL`
       // properties is not allowed.
+      // istanbul ignore else: it is unnecessary to cover the else path here
       if (result$LWS !== undefined && isUnmaskedSymbol$LWS) {
         throw new TypeErrorCtor$LWS$1(ERR_ILLEGAL_PROPERTY_ACCESS$LWS);
       }
@@ -333,6 +337,7 @@ function createUnmaskableTraps$LWS(func$LWS) {
     getOwnPropertyDescriptor(target$LWS, key$LWS) {
       const result$LWS = ReflectGetOwnPropertyDescriptor$LWS(target$LWS, key$LWS);
       // Getting forged descriptors of handshake properties is not allowed.
+      // istanbul ignore else: it is unnecessary to cover the else path here
       if (result$LWS && key$LWS === LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS) {
         throw new TypeErrorCtor$LWS$1(ERR_ILLEGAL_PROPERTY_ACCESS$LWS);
       }
@@ -345,6 +350,7 @@ function createUnmaskableTraps$LWS(func$LWS) {
         handshakeUnmaskFlag$LWS = false;
         // Checking the existence of forged `LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL`
         // properties is not allowed.
+        // istanbul ignore else: it is unnecessary to cover the else path here
         if (isUnmaskedSymbol$LWS) {
           throw new TypeErrorCtor$LWS$1(ERR_ILLEGAL_PROPERTY_ACCESS$LWS);
         }
@@ -358,6 +364,7 @@ function createUnmaskableTraps$LWS(func$LWS) {
     },
     set(target$LWS, key$LWS, value$LWS, receiver$LWS) {
       // Setting forged values of handshake properties is not allowed.
+      // istanbul ignore else: it is unnecessary to cover the else path here
       if (key$LWS === LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS) {
         throw new TypeErrorCtor$LWS$1(ERR_ILLEGAL_PROPERTY_ACCESS$LWS);
       }
@@ -366,7 +373,7 @@ function createUnmaskableTraps$LWS(func$LWS) {
   };
 }
 function getUnmaskedFunction$LWS(func$LWS) {
-  const unmasked$LWS = LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS in func$LWS ? undefined : func$LWS[LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS];
+  const unmasked$LWS = LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS in func$LWS ? /* istanbul ignore next */undefined : func$LWS[LOCKER_NEAR_MEMBRANE_UNMASKED_VALUE_SYMBOL$LWS];
   return unmasked$LWS === undefined ? func$LWS : unmasked$LWS;
 }
 function isMaskedFunction$LWS(value$LWS) {
@@ -564,6 +571,8 @@ const {
   toFixed: NumberProtoToFixed$LWS,
   valueOf: NumberProtoValueOf$LWS
 } = NumberCtor$LWS$1.prototype;
+
+// @ts-nocheck
 const StringCtor$LWS$1 = String;
 const {
   prototype: StringProto$LWS$1
@@ -590,6 +599,12 @@ const quoteCharRegExpRegistry$LWS = {
   [CHAR_QUOTE_DOUBLE$LWS]: /\\?"/g,
   [CHAR_QUOTE_SINGLE$LWS]: /\\?'/g
 };
+const TrustedHTMLCtor$LWS = typeof TrustedHTML === 'function' ? TrustedHTML : /* istanbul ignore next: unreachable in test env */undefined;
+// istanbul ignore next: optional chaining and nullish coalescing results in an expansion that contains an unreachable "void 0" branch for every occurrence of the operator
+const TrustedHTMLProtoToString$LWS = TrustedHTMLCtor$LWS == null || (_TrustedHTMLCtor$prot$LWS = TrustedHTMLCtor$LWS.prototype) == null ? void 0 : _TrustedHTMLCtor$prot$LWS.toString;
+const TrustedScriptCtor$LWS = typeof TrustedScript === 'function' ? TrustedScript : /* istanbul ignore next: unreachable in test env */undefined;
+// istanbul ignore next: optional chaining and nullish coalescing results in an expansion that contains an unreachable "void 0" branch for every occurrence of the operator
+const TrustedScriptProtoToString$LWS = TrustedScriptCtor$LWS == null || (_TrustedScriptCtor$pr$LWS = TrustedScriptCtor$LWS.prototype) == null ? void 0 : _TrustedScriptCtor$pr$LWS.toString;
 const URLCtor$LWS = typeof URL === 'function' ? URL : /* istanbul ignore next: unreachable in test env */undefined;
 // istanbul ignore next: optional chaining and nullish coalescing results in an expansion that contains an unreachable "void 0" branch for every occurrence of the operator
 const URLProtoToString$LWS = URLCtor$LWS == null || (_URLCtor$prototype$LWS = URLCtor$LWS.prototype) == null ? void 0 : _URLCtor$prototype$LWS.toString;
@@ -655,6 +670,13 @@ function toSafeTemplateStringValue$LWS(value$LWS) {
       return ReflectApply$LWS$1(FunctionProtoToString$LWS, value$LWS, []);
     }
     if (typeof value$LWS === 'object' && value$LWS !== null) {
+      if (TrustedHTMLCtor$LWS && value$LWS instanceof TrustedHTMLCtor$LWS) {
+        return ReflectApply$LWS$1(TrustedHTMLProtoToString$LWS, value$LWS, []);
+      }
+      /* istanbul ignore next: unreachable in test env */
+      if (TrustedScriptCtor$LWS && value$LWS instanceof TrustedScriptCtor$LWS) {
+        return ReflectApply$LWS$1(TrustedScriptProtoToString$LWS, value$LWS, []);
+      }
       if (URLCtor$LWS && value$LWS instanceof URLCtor$LWS) {
         return ReflectApply$LWS$1(URLProtoToString$LWS, value$LWS, []);
       }
@@ -1021,6 +1043,7 @@ function isNearMembraneProxy$LWS$1(value$LWS) {
   return false;
 }
 const SEEN_OBJECTS$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
+// istanbul ignore next: this may be dead code, further investigation needed
 function cloneBoxedPrimitive$LWS(object$LWS) {
   return ObjectCtor$LWS$1(getNearMembraneProxySerializedValue$LWS$1(object$LWS));
 }
@@ -1060,6 +1083,7 @@ function cloneMap$LWS(map$LWS, queue$LWS) {
   }
   return clone$LWS;
 }
+// istanbul ignore next: this may be dead code, further investigation needed
 function cloneRegExp$LWS(regexp$LWS) {
   const {
     flags: flags$LWS,
@@ -1264,7 +1288,9 @@ function partialStructuredCloneInternal$LWS(value$LWS) {
       switch (brand$LWS) {
         // Step 12: Otherwise, if value has a [[RegExpMatcher]] internal slot...
         case TO_STRING_BRAND_REG_EXP$LWS:
+          // istanbul ignore next: this may be dead code, further investigation needed
           cloneValue$LWS = cloneRegExp$LWS(originalValue$LWS);
+          // istanbul ignore next: this may be dead code, further investigation needed
           break;
         // Step 7: If value has a [[BooleanData]] internal slot...
         case TO_STRING_BRAND_BOOLEAN$LWS$1:
@@ -1277,7 +1303,9 @@ function partialStructuredCloneInternal$LWS(value$LWS) {
         // Step 10: Otherwise, if value has a [[StringData]] internal slot...
         // eslint-disable-next-line no-fallthrough
         case TO_STRING_BRAND_STRING$LWS$1:
+          // istanbul ignore next: this may be dead code, further investigation needed
           cloneValue$LWS = cloneBoxedPrimitive$LWS(originalValue$LWS);
+          // istanbul ignore next: this may be dead code, further investigation needed
           break;
       }
     }
@@ -1329,6 +1357,10 @@ const {
 function consoleWarn$LWS(...args$LWS) {
   ReflectApply$LWS$1(consoleWarnRef$LWS, consoleRef$LWS, args$LWS);
 }
+let gaterEnabledFeatures$LWS = [];
+function isGaterEnabledFeature$LWS(featureName$LWS) {
+  return ReflectApply$LWS$1(ArrayProtoIncludes$LWS$1, gaterEnabledFeatures$LWS, [`com.salesforce.locker.${featureName$LWS}`]);
+}
 const trackedLiveTargets$LWS = toSafeWeakSet$LWS$1(new WeakSetCtor$LWS$1());
 function isTargetLive$LWS(target$LWS, targetTraits$LWS = 0 /* TargetTraits.None */) {
   if (targetTraits$LWS & 1 /* TargetTraits.IsArray */ || targetTraits$LWS & 2 /* TargetTraits.IsArrayBufferView */ || targetTraits$LWS & 64 /* TargetTraits.Revoked */ || target$LWS === null || target$LWS === undefined || target$LWS === ObjectProto$LWS$1 || target$LWS === RegExpProto$LWS$1) {
@@ -1410,6 +1442,10 @@ function trackAsLiveTarget$LWS(target$LWS) {
   trackedLiveTargets$LWS.add(target$LWS);
   return target$LWS;
 }
+const lockerFeatures$LWS = {};
+function isLockerFeatureEnabled$LWS(featureName$LWS) {
+  return lockerFeatures$LWS[featureName$LWS];
+}
 const NS_HEAD$LWS = `${LOCKER_SERVICE_KEY$LWS}-`;
 const NS_TAIL$LWS = '$';
 const STORAGE_NS_HEAD$LWS = `${LOCKER_SERVICE_KEY$LWS}[`;
@@ -1453,7 +1489,7 @@ const {
 } = PromiseCtor$LWS.prototype;
 const PromiseResolve$LWS = PromiseCtor$LWS.resolve.bind(PromiseCtor$LWS);
 const PromiseReject$LWS = PromiseCtor$LWS.reject.bind(PromiseCtor$LWS);
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -1668,6 +1704,7 @@ function initWindowOpenChildWindow$LWS(win$LWS, url$LWS) {
       // than `url`.
       // `location.href` is a non-configurable property so can be accessed
       // directly.
+      // istanbul ignore else: current tests have no way of expressing a state that would cause this condition to evaluate false
       if (location$LWS.href !== url$LWS) {
         // Opening and closing `doc` prevents the default browser
         // redirect behavior.
@@ -1682,6 +1719,57 @@ function initWindowOpenChildWindow$LWS(win$LWS, url$LWS) {
   }
   return win$LWS;
 }
+// This is only used by window.open() and document.open(x, y, z) distortions to
+// block access to unsafe properties of the child window that's returned by those
+// APIs. These properties must be otherwise available directly on the sandbox window,
+// or via iframe.contentWindow created within the sandbox.
+// To be effective, we mark the blocked thing with a symbol, so that can be detected by
+// the distortion, otherwise the distortion will replace whatever we define here with
+// whatever it provides.
+const CHILD_WINDOW_BLOCKED_PROPERTY_SYMBOL$LWS = SymbolFor$LWS$1('@@lwsChildWindowBlockedProperty');
+const CHILD_WINDOW_BLOCKED_PROPERTIES$LWS = ['eval', 'Function', 'setInterval', 'setTimeout'];
+function markForUnsafePropertyBlocking$LWS(childWindow$LWS) {
+  // If this function somehow receives the rootWindow, just return it.
+  if (!childWindow$LWS || childWindow$LWS === rootWindow$LWS$1) {
+    return childWindow$LWS;
+  }
+  for (const blocked$LWS of CHILD_WINDOW_BLOCKED_PROPERTIES$LWS) {
+    const descriptor$LWS = ReflectGetOwnPropertyDescriptor$LWS(childWindow$LWS, blocked$LWS);
+    const replacement$LWS = /* istanbul ignore next: this replacement function will never actually be called */() => {};
+    ReflectDefineProperty$LWS$1(replacement$LWS, CHILD_WINDOW_BLOCKED_PROPERTY_SYMBOL$LWS, {
+      __proto__: null,
+      configurable: false,
+      enumerable: false,
+      get() {
+        return true;
+      }
+    });
+    if (typeof childWindow$LWS[blocked$LWS] === 'function') {
+      descriptor$LWS.value = replacement$LWS;
+    }
+    /* Eventually there will be other types of blocked properties
+    else {
+        descriptor.get = replacement;
+    }
+    */
+    ReflectDefineProperty$LWS$1(childWindow$LWS, blocked$LWS, descriptor$LWS);
+  }
+  return childWindow$LWS;
+}
+function throwIfMarkedAsUnsafeInChildWindow$LWS(virtualEnvironmentEvaluator$LWS, name$LWS) {
+  // This seemingly strange approach is necessary because this distortion will
+  // otherwise replace whatever was force-assigned to the childWindow property
+  // by markForUnsafePropertyBlocking with this distortion, effectively acting
+  // as an UNDO of markForUnsafePropertyBlocking(). We have to dig into
+  // the sandbox's global object and look at the actual property to see if it was
+  // marked for unsafe property blocking, because indirect property (ie. eval) will bypass
+  // any "this" property lookups.
+  const getPossiblyBlockedPropertyFromSandbox$LWS = virtualEnvironmentEvaluator$LWS(`() => globalThis.${name$LWS}`);
+  // istanbul ignore else: it is unnecessary to cover the else path here
+  if (getPossiblyBlockedPropertyFromSandbox$LWS()[CHILD_WINDOW_BLOCKED_PROPERTY_SYMBOL$LWS]) {
+    throw new LockerSecurityError$LWS(`Cannot call ${name$LWS} on this window.`);
+  }
+}
 function isWindow$LWS(value$LWS) {
   if (typeof value$LWS === 'object' && value$LWS !== null && ObjectHasOwn$LWS$1(value$LWS, 'window') && value$LWS.window === value$LWS) {
     // Slower check that must certainly detect a window object.
@@ -1759,6 +1847,9 @@ class Validator$LWS {
       ReflectApply$LWS$1(ElementProtoInnerHTMLSetter$LWS, this._templates.right, [rightString$LWS]);
       return deepIsEqualNode$LWS(this._templates.left, this._templates.right);
     };
+    // There is no reason to ever allow any HTML or XML that contains all three of these substrings.
+    // eslint-disable-next-line class-methods-use-this
+    this.isInherentlyUnsecure = input$LWS => ReflectApply$LWS$1(StringProtoIncludes$LWS, input$LWS, ['iframe']) && ReflectApply$LWS$1(StringProtoIncludes$LWS, input$LWS, ['script']) && ReflectApply$LWS$1(StringProtoIncludes$LWS, input$LWS, ['srcdoc']);
     this.isSharedElement = element$LWS => element$LWS === ReflectApply$LWS$1(DocumentProtoHeadGetter$LWS, this._document, []) || element$LWS === ReflectApply$LWS$1(DocumentProtoBodyGetter$LWS$1, this._document, []) || element$LWS === ReflectApply$LWS$1(DocumentProtoDocumentElementGetter$LWS, this._document, []);
     this._constructors = {
       HTMLLinkElement: HTMLLinkElement$LWS,
@@ -2112,7 +2203,7 @@ const {
 const XhrProtoResponseTextGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'responseText');
 const XhrProtoStatusGetter$LWS = ObjectLookupOwnGetter$LWS$1(XhrProto$LWS, 'status');
 ObjectLookupOwnSetter$LWS(XhrProto$LWS, 'withCredentials');
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -2171,7 +2262,7 @@ function sanitizeURLForElement$LWS(url$LWS) {
 function sanitizeURLString$LWS(urlString$LWS) {
   return urlString$LWS === '' ? urlString$LWS : ReflectApply$LWS$1(StringProtoReplace$LWS, urlString$LWS, [newlinesAndTabsRegExp$LWS, '']);
 }
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 /*! @license DOMPurify 3.0.5 | (c) Cure53 and other contributors | Released under the Apache license 2.0 and Mozilla Public License 2.0 | github.com/cure53/DOMPurify/blob/3.0.5/LICENSE */
 
@@ -3857,7 +3948,7 @@ try {
   // swallow
 }
 const trusted = createPolicy('trusted', policyOptions);
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -3937,6 +4028,7 @@ function createSantizerHooksRegistry$LWS(sandboxKey$LWS) {
       const {
         tagName: tagName$LWS
       } = data$LWS;
+      // istanbul ignore next: optional chaining and nullish coalescing results in an expansion that contains an unreachable "void 0" branch for every occurrence of the operator
       const tagNameCheck$LWS = config$LWS == null || (_config$CUSTOM_ELEMEN$LWS = config$LWS.CUSTOM_ELEMENT_HANDLING) == null ? void 0 : _config$CUSTOM_ELEMEN$LWS.tagNameCheck;
       if (tagNameCheck$LWS && ReflectApply$LWS$1(RegExpProtoTest$LWS$1, tagNameCheck$LWS, [tagName$LWS]) &&
       // This MUST be called ONLY after we've ensured the previous
@@ -4105,6 +4197,7 @@ function uponSanitizeAttribute$LWS(node$LWS, data$LWS, _config$LWS) {
   // https://lit.dev/docs/components/events/
   // https://lit.dev/docs/templates/expressions/#property-expressions
   // https://lit.dev/docs/templates/expressions/#boolean-attribute-expressions
+  // istanbul ignore next: this is tested under all normal CI runs, but is not included in coverage
   if (attrName$LWS && (ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['@']) || ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['.']) || ReflectApply$LWS$1(StringProtoStartsWith$LWS, attrName$LWS, ['?']))) {
     data$LWS.forceKeepAttr = true;
   }
@@ -4116,7 +4209,7 @@ function blobSanitizer$LWS(sandboxKey$LWS) {
   }
   return getSanitizerForConfig$LWS(sandboxKey$LWS, 'STRING_BLOB_HTML');
 }
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 /*!
  * Copyright (C) 2023 salesforce.com, inc.
@@ -4314,7 +4407,7 @@ function encloseSrcSetter$LWS(targetElement$LWS) {
     ReflectApply$LWS$1(ElementProtoSetAttributeNS$LWS, targetElement$LWS, [attributeNamespaceURI$LWS, attributeName$LWS, src$LWS]);
   };
 }
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -4369,8 +4462,12 @@ class VirtualRegistry$LWS {
     } else {
       // When there is already a PivotCtor for the given tagName, we need to ensure that
       // this definition doesn't have a conflicting formAssociated value for that tagName.
+      //
+      // NOTE: This is always going to be a definition that's been passed through
+      // createDefinitionRecord(), so it will always have either a true or false value
+      // (there will never be a need to provide a default value here)
       const {
-        formAssociated: formAssociated$LWS = false
+        formAssociated: formAssociated$LWS
       } = definition$LWS;
       if (PivotCtor$LWS.formAssociated !== formAssociated$LWS) {
         throw new LockerSecurityError$LWS(`Cannot create a definition for <${tagName$LWS}> with "formAssociated = ${formAssociated$LWS}". Either use "formAssociated = ${PivotCtor$LWS.formAssociated}" for this component or rename the component to not conflict with <${tagName$LWS}>`);
@@ -5055,6 +5152,7 @@ document$LWS = globalObject$LWS.document) {
 function setCustomElementsRegistry$LWS(document$LWS, key$LWS) {
   currentRegistry$LWS = getSandboxCustomElementRegistry$LWS(document$LWS, key$LWS);
 }
+const DataTransferBlockedProperties$LWS = ['mozCursor', 'mozSourceNode', 'mozUserCancelled'];
 const attributeDistortionFactoriesCache$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
 const sandboxAttributeDistortionRegistryCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
 function finalizeAttributeDistortions$LWS(record$LWS) {
@@ -5205,6 +5303,45 @@ function initDistortionAuraUtilGlobalEval$LWS({
     }];
   };
 }
+function initDistortionBroadcastChannelPostMessage$LWS({
+  globalObject: globalObject$LWS
+}) {
+  const {
+    BroadcastChannel: BroadcastChannel$LWS
+  } = globalObject$LWS;
+  // istanbul ignore if: this is a safety precaution, but currently unreachable via tests
+  if (typeof BroadcastChannel$LWS !== 'function') {
+    return noop$LWS$1;
+  }
+  const {
+    prototype: {
+      postMessage: originalPostMessage$LWS
+    }
+  } = BroadcastChannel$LWS;
+  const distortionEntry$LWS = [originalPostMessage$LWS, function postMessage$LWS(...args$LWS) {
+    try {
+      return ReflectApply$LWS$1(originalPostMessage$LWS, this, args$LWS);
+    } catch (error) {
+      // We don't check if `error instance of DOMException` because
+      // accessing `DOMException` of the `globalObject` will throw
+      // an error for opaque windows.
+      const {
+        length: length$LWS
+      } = args$LWS;
+      if (length$LWS) {
+        const message$LWS = args$LWS[0];
+        if (isObject$LWS$1(message$LWS)) {
+          args$LWS[0] = partialStructuredClone$LWS(message$LWS);
+          return ReflectApply$LWS$1(originalPostMessage$LWS, this, args$LWS);
+        }
+      }
+      throw error;
+    }
+  }];
+  return function distortionBroadcastChannelPostMessage$LWS() {
+    return distortionEntry$LWS;
+  };
+}
 
 /* istanbul ignore next: only available in secure context */
 function initDistortionCacheStorageDelete$LWS({
@@ -5914,6 +6051,9 @@ function initDistortionDocumentExecCommand$LWS({
         if (loweredCommand$LWS === 'selectall' && this === rootDocument$LWS) {
           throwLockerSecurityError$LWS(command$LWS, this);
         }
+        // Guard against TOCTOU attacks by forcing execCommand to receive whatever
+        // the first read value of the provided command is.
+        args$LWS[0] = command$LWS;
         if (length$LWS > 2) {
           const {
             2: unsanitizedValue$LWS
@@ -5978,6 +6118,9 @@ function initDistortionDocumentOpen$LWS({
       // https://developer.mozilla.org/en-US/docs/Web/API/Document/open#three-argument_document.open
       const normalizedArgs$LWS = normalizeWindowOpenArguments$LWS(args$LWS);
       const childWindow$LWS = ReflectApply$LWS$1(originalDocumentOpen$LWS, this, normalizedArgs$LWS);
+      // W-16032332
+      // Block access to unsafe child window properties
+      markForUnsafePropertyBlocking$LWS(childWindow$LWS);
       if (childWindow$LWS) {
         initWindowOpenChildWindow$LWS(childWindow$LWS, normalizedArgs$LWS[0]);
       }
@@ -6012,6 +6155,7 @@ function initDistortionDocumentReplaceChildren$LWS({
 }
 function initDistortionDOMParserParseFromString$LWS({
   document: document$LWS,
+  globalObject: globalObject$LWS,
   globalObject: {
     DOMParser: {
       prototype: {
@@ -6024,6 +6168,9 @@ function initDistortionDOMParserParseFromString$LWS({
     key: key$LWS
   }) {
     return [originalParseFromString$LWS, function parseFromString$LWS(...args$LWS) {
+      const {
+        isInherentlyUnsecure: isInherentlyUnsecure$LWS
+      } = getValidator$LWS(document$LWS, globalObject$LWS);
       // DOMParser.prototype.parseFromString can only be called with
       // exactly two arguments. If it receives one argument, it will fail.
       // Some implementations will also fail if it receives more than two
@@ -6035,11 +6182,6 @@ function initDistortionDOMParserParseFromString$LWS({
         // of that argument.
         const string$LWS = toString$LWS(args$LWS[0]);
         const mimeType$LWS = toString$LWS(args$LWS[1]);
-        // This must be called to signal to the virtual
-        // CustomElementRegistry that the next thing created
-        // MAY CONTAIN a custom element, which must be marked for
-        // association to this sandbox.
-        setCustomElementsRegistry$LWS(document$LWS, key$LWS);
         let contentType$LWS;
         switch (mimeType$LWS) {
           case 'application/xhtml+xml':
@@ -6053,6 +6195,16 @@ function initDistortionDOMParserParseFromString$LWS({
           default:
             contentType$LWS = ContentType$LWS.HTML;
         }
+        if (contentType$LWS === ContentType$LWS.XML) {
+          if (isInherentlyUnsecure$LWS(string$LWS)) {
+            throw new LockerSecurityError$LWS(`Cannot 'parseFromString' using an unsecure ${toSafeTemplateStringValue$LWS(string$LWS)}.`);
+          }
+        }
+        // This must be called to signal to the virtual
+        // CustomElementRegistry that the next thing created
+        // MAY CONTAIN a custom element, which must be marked for
+        // association to this sandbox.
+        setCustomElementsRegistry$LWS(document$LWS, key$LWS);
         args$LWS[0] = lwsInternalPolicy$LWS.createHTML(string$LWS, key$LWS, contentType$LWS);
       }
       return ReflectApply$LWS$1(originalParseFromString$LWS, this, args$LWS);
@@ -6311,6 +6463,7 @@ function scriptPropertySetters$LWS(incomingThis$LWS, property$LWS, valueAsTruste
   return false;
 }
 const {
+  isInherentlyUnsecure: isInherentlyUnsecure$3$LWS,
   isSharedElement: isSharedElement$n$LWS
 } = rootValidator$LWS;
 function initDistortionElementInnerHTMLSetter$LWS({
@@ -6354,6 +6507,9 @@ function initDistortionElementInnerHTMLSetter$LWS({
         const contentType$LWS = this instanceof SVGElement$LWS ? ContentType$LWS.SVG : ContentType$LWS.HTML;
         value$LWS = lwsInternalPolicy$LWS.createHTML(value$LWS, key$LWS, contentType$LWS);
       }
+      if (isInherentlyUnsecure$3$LWS(value$LWS)) {
+        throw new LockerSecurityError$LWS(`Cannot set 'innerHTML' using an unsecure ${toSafeTemplateStringValue$LWS(value$LWS)}.`);
+      }
       ReflectApply$LWS$1(originalInnerHTMLSetter$LWS, this, [value$LWS]);
     }];
   };
@@ -6389,6 +6545,7 @@ function initDistortionElementInsertAdjacentElement$LWS({
   };
 }
 const {
+  isInherentlyUnsecure: isInherentlyUnsecure$2$LWS,
   isSharedElement: isSharedElement$l$LWS
 } = rootValidator$LWS;
 const allowedElementHTMLRegExp$LWS = /^\s*<(link|script|style)/i;
@@ -6419,12 +6576,16 @@ function initDistortionElementInsertAdjacentHTML$LWS({
         setCustomElementsRegistry$LWS(document$LWS, key$LWS);
         const contentType$LWS = this instanceof SVGElement ? ContentType$LWS.SVG : ContentType$LWS.HTML;
         args$LWS[1] = lwsInternalPolicy$LWS.createHTML(args$LWS[1], key$LWS, contentType$LWS);
+        if (isInherentlyUnsecure$2$LWS(args$LWS[1])) {
+          throw new LockerSecurityError$LWS(`Cannot 'insertAdjacentHTML' using an unsecure ${toSafeTemplateStringValue$LWS(args$LWS[1])}.`);
+        }
       }
       ReflectApply$LWS$1(originalInsertAdjacentHTML$LWS, this, args$LWS);
     }];
   };
 }
 const {
+  isInherentlyUnsecure: isInherentlyUnsecure$1$LWS,
   isSharedElement: isSharedElement$k$LWS
 } = rootValidator$LWS;
 function initDistortionElementOuterHTMLSetter$LWS({
@@ -6447,7 +6608,11 @@ function initDistortionElementOuterHTMLSetter$LWS({
       // MAY CONTAIN a custom element, which must be marked for
       // association to this sandbox.
       setCustomElementsRegistry$LWS(document$LWS, key$LWS);
-      ReflectApply$LWS$1(originalOuterHTMLSetter$LWS, this, [lwsInternalPolicy$LWS.createHTML(value$LWS, key$LWS, ContentType$LWS.HTML)]);
+      const html$LWS = lwsInternalPolicy$LWS.createHTML(value$LWS, key$LWS, ContentType$LWS.HTML);
+      if (isInherentlyUnsecure$1$LWS(html$LWS)) {
+        throw new LockerSecurityError$LWS(`Cannot set outerHTML using an unsecure ${toSafeTemplateStringValue$LWS(html$LWS)}.`);
+      }
+      ReflectApply$LWS$1(originalOuterHTMLSetter$LWS, this, [html$LWS]);
     }];
   };
 }
@@ -6756,6 +6921,7 @@ function initDistortionElementSetAttributeNS$LWS({
   };
 }
 const {
+  isInherentlyUnsecure: isInherentlyUnsecure$LWS,
   isSharedElement: isSharedElement$f$LWS
 } = rootValidator$LWS;
 function initDistortionElementSetHTML$LWS({
@@ -6795,6 +6961,9 @@ function initDistortionElementSetHTML$LWS({
         const value$LWS = args$LWS[0];
         const contentType$LWS = this instanceof SVGElement$LWS ? ContentType$LWS.SVG : ContentType$LWS.HTML;
         args$LWS[0] = lwsInternalPolicy$LWS.createHTML(value$LWS, key$LWS, contentType$LWS);
+        if (isInherentlyUnsecure$LWS(args$LWS[0])) {
+          throw new LockerSecurityError$LWS(`Cannot 'setHTML' using an unsecure ${toSafeTemplateStringValue$LWS(args$LWS[0])}.`);
+        }
       }
       ReflectApply$LWS$1(originalSetHTML$LWS, this, args$LWS);
     }];
@@ -6867,9 +7036,13 @@ function initDistortionEval$LWS({
   }
 }) {
   return function distortionEval$LWS({
-    sandboxEvaluator: sandboxEvaluator$LWS
+    sandboxEvaluator: sandboxEvaluator$LWS,
+    virtualEnvironmentEvaluator: virtualEnvironmentEvaluator$LWS
   }) {
-    return [originalEval$LWS, sourceText$LWS => sandboxEvaluator$LWS(transformSourceText$LWS(toString$LWS(sourceText$LWS)), UNCOMPILED_CONTEXT$LWS)];
+    return [originalEval$LWS, function (sourceText$LWS) {
+      throwIfMarkedAsUnsafeInChildWindow$LWS(virtualEnvironmentEvaluator$LWS, 'eval');
+      return sandboxEvaluator$LWS(transformSourceText$LWS(toString$LWS(sourceText$LWS)), UNCOMPILED_CONTEXT$LWS);
+    }];
   };
 }
 function createDistortedComposedPath$LWS(event$LWS, sandboxKey$LWS) {
@@ -6971,9 +7144,11 @@ function initDistortionFunction$LWS({
 }) {
   const funcFooterRegExp$LWS = /\n?}[^}]*$/;
   return function distortionFunction$LWS({
-    sandboxEvaluator: sandboxEvaluator$LWS
+    sandboxEvaluator: sandboxEvaluator$LWS,
+    virtualEnvironmentEvaluator: virtualEnvironmentEvaluator$LWS
   }) {
     return [originalFunction$LWS, function Function$LWS(...args$LWS) {
+      throwIfMarkedAsUnsafeInChildWindow$LWS(virtualEnvironmentEvaluator$LWS, 'Function');
       // The `arguments` object has `Symbol.iterator` as an own
       // property, not inherited, so it avoids prototype pollution
       // attacks.
@@ -9074,7 +9249,7 @@ function createDistortionHrefAttributeFactoryInitializer$LWS(attributeName$LWS)
 }
 const initDistortionSVGUseElementHrefAttribute$LWS = createDistortionHrefAttributeFactoryInitializer$LWS('href');
 const initDistortionSVGUseElementXlinkHrefAttribute$LWS = createDistortionHrefAttributeFactoryInitializer$LWS('xlink:href');
-function createTrustedTypesError$LWS(name$LWS = '') {
+function createTrustedTypesExceptionMessage$LWS(name$LWS) {
   return `Cannot create TrustedTypePolicy with '${name$LWS}' policy name.`;
 }
 function initDistortionTrustedTypePolicyFactoryCreatePolicy$LWS({
@@ -9093,15 +9268,17 @@ function initDistortionTrustedTypePolicyFactoryCreatePolicy$LWS({
     const name$LWS = args$LWS.length ? args$LWS[0] : /* istanbul ignore next: needs default platform behavior test */undefined;
     // istanbul ignore else: needs default platform behavior test
     if (name$LWS === 'default') {
-      throw new LockerSecurityError$LWS(createTrustedTypesError$LWS(name$LWS));
+      throw new LockerSecurityError$LWS(createTrustedTypesExceptionMessage$LWS(name$LWS));
     }
     // If the policy is one of the CSP policies, it should be allowed
     try {
       // istanbul ignore next: needs default platform behavior test
       return ReflectApply$LWS$1(originalCreatePolicy$LWS, this, args$LWS);
     } catch (_unused3$LWS) {
-      consoleWarn$LWS(`${createTrustedTypesError$LWS(name$LWS)} Substituting with Lightning Web Security policy.`);
+      // istanbul ignore next: this is tested, but currently cannot be tested in the coverage environment
+      consoleWarn$LWS(`${createTrustedTypesExceptionMessage$LWS(name$LWS)} Substituting with Lightning Web Security policy.`);
     }
+    // istanbul ignore next: this is tested, but currently cannot be tested in the coverage environment
     return trusted;
   }];
   return function distortionTrustedTypePolicyFactoryCreatePolicy$LWS() {
@@ -9109,6 +9286,7 @@ function initDistortionTrustedTypePolicyFactoryCreatePolicy$LWS({
   };
 }
 const HTML_MIME_TYPES_LIST$LWS = toSafeArray$LWS$1(['text/html', 'image/svg+xml', 'text/xml']);
+const createInsecureBlobErrorMessage$LWS = input$LWS => `Cannot 'createObjectURL' using an unsecure ${toSafeTemplateStringValue$LWS(input$LWS)}.`;
 function initDistortionURLCreateObjectURL$LWS({
   document: document$LWS,
   globalObject: globalObject$LWS,
@@ -9124,7 +9302,8 @@ function initDistortionURLCreateObjectURL$LWS({
   // needs to be bound to the global object of the magenta object (arbitrary
   // user-code created global objects).
   const {
-    isEqualDomString: isEqualDomString$LWS
+    isEqualDomString: isEqualDomString$LWS,
+    isInherentlyUnsecure: isInherentlyUnsecure$LWS
   } = getValidator$LWS(document$LWS, globalObject$LWS);
   return function distortionURLCreateObjectURL$LWS({
     key: key$LWS
@@ -9170,10 +9349,14 @@ function initDistortionURLCreateObjectURL$LWS({
           throw new LockerSecurityError$LWS(`Unable to verify ${toSafeTemplateStringValue$LWS(blobObject$LWS)} is secure.`);
         }
         const responseText$LWS = ReflectApply$LWS$1(XhrProtoResponseTextGetter$LWS, xhr$LWS, []);
+        // W-15987833
+        if (isInherentlyUnsecure$LWS(responseText$LWS)) {
+          throw new LockerSecurityError$LWS(createInsecureBlobErrorMessage$LWS(blobObject$LWS));
+        }
         const sanitized$LWS = sanitizer$LWS.sanitize(responseText$LWS);
         if (!isEqualDomString$LWS(trusted.createHTML(responseText$LWS), trusted.createHTML(sanitized$LWS))) {
           URLRevokeObjectURL$LWS(outURL$LWS);
-          throw new LockerSecurityError$LWS(`Cannot 'createObjectURL' using an unsecure ${toSafeTemplateStringValue$LWS(blobObject$LWS)}.`);
+          throw new LockerSecurityError$LWS(createInsecureBlobErrorMessage$LWS(blobObject$LWS));
         }
         return outURL$LWS;
       }
@@ -9488,6 +9671,9 @@ function initDistortionWindowOpen$LWS({
   const distortionEntry$LWS = [originalWindowOpen$LWS, function open$LWS(...args$LWS) {
     const normalizedArgs$LWS = normalizeWindowOpenArguments$LWS(args$LWS);
     const childWindow$LWS = ReflectApply$LWS$1(originalWindowOpen$LWS, this, normalizedArgs$LWS);
+    // W-16032332
+    // Block access to unsafe child window properties
+    markForUnsafePropertyBlocking$LWS(childWindow$LWS);
     // W-14218118
     // If the target is '_self', '_parent', or '_top', only makes one request
     if (normalizedArgs$LWS.length > 1) {
@@ -9555,9 +9741,11 @@ function initDistortionWindowSetInterval$LWS({
   }
 }) {
   return function distortionWndowSetInterval$LWS({
-    sandboxEvaluator: sandboxEvaluator$LWS
+    sandboxEvaluator: sandboxEvaluator$LWS,
+    virtualEnvironmentEvaluator: virtualEnvironmentEvaluator$LWS
   }) {
     return [originalSetInterval$LWS, function setInterval$LWS(...args$LWS) {
+      throwIfMarkedAsUnsafeInChildWindow$LWS(virtualEnvironmentEvaluator$LWS, 'setInterval');
       if (args$LWS.length) {
         const {
           0: callback$LWS
@@ -9588,9 +9776,11 @@ function initDistortionWindowSetTimeout$LWS({
   }
 }) {
   return function distortionWindowSetTimeout$LWS({
-    sandboxEvaluator: sandboxEvaluator$LWS
+    sandboxEvaluator: sandboxEvaluator$LWS,
+    virtualEnvironmentEvaluator: virtualEnvironmentEvaluator$LWS
   }) {
     return [originalSetTimeout$LWS, function setTimeout$LWS(...args$LWS) {
+      throwIfMarkedAsUnsafeInChildWindow$LWS(virtualEnvironmentEvaluator$LWS, 'setTimeout');
       if (args$LWS.length) {
         const {
           0: callback$LWS
@@ -9775,6 +9965,8 @@ Naming convention for DistortionFactory function types:
     distortion[ObjectName]Proto : used for the object prototype itself
 */
 const internalDistortionFactoryInitializers$LWS = [
+// BroadcastChannel
+initDistortionBroadcastChannelPostMessage$LWS,
 // CSSStyleRule
 initDistortionCSSStyleRuleStyleGetter$LWS,
 // Document
@@ -9897,9 +10089,9 @@ initDistortionElementAfter$LWS, initDistortionElementAppend$LWS, initDistortionE
 // initDistortionNodeAppendChild,
 initDistortionNodeInsertBefore$LWS]);
 const externalKeyedDistortionFactoryInitializers$LWS = internalKeyedDistortionFactoryInitializers$LWS;
-toSafeMap$LWS$1(new MapCtor$LWS$1([[initDistortionCacheStorageDelete$LWS, 'caches'], [initDistortionCacheStorageHas$LWS, 'caches'], [initDistortionCacheStorageKeys$LWS, 'caches'], [initDistortionCacheStorageMatch$LWS, 'caches'], [initDistortionCacheStorageOpen$LWS, 'caches'], [initDistortionCookieStoreDelete$LWS, 'cookieStore'], [initDistortionCookieStoreGet$LWS, 'cookieStore'], [initDistortionCookieStoreGetAll$LWS, 'cookieStore'], [initDistortionCookieStoreOnChange$LWS, 'cookieStore'], [initDistortionCookieStoreSet$LWS, 'cookieStore'], [initDistortionCSSStyleRuleStyleGetter$LWS, 'style'], [initDistortionCustomElementRegistryDefine$LWS, 'customElements'], [initDistortionCustomElementRegistryGet$LWS, 'customElements'], [initDistortionCustomElementRegistryUpgrade$LWS, 'customElements'], [initDistortionCustomElementRegistryWhenDefined$LWS, 'customElements'], [initDistortionDocumentCookieGetter$LWS, 'documentCookie'], [initDistortionDocumentCookieSetter$LWS, 'documentCookie'], [initDistortionDocumentDomainSetter$LWS, 'documentDomain'], [initDistortionDocumentExecCommand$LWS, 'documentExecCommand'], [initDistortionDOMParserParseFromString$LWS, 'domParserParseFromString'], [initDistortionElementAfter$LWS, 'element'], [initDistortionElementAppend$LWS, 'element'], [initDistortionElementAttributesGetter$LWS, 'attributes'], [initDistortionElementBefore$LWS, 'element'], [initDistortionElementGetInnerHTML$LWS, 'innerHTML'], [initDistortionElementInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionElementInsertAdjacentElement$LWS, 'element'], [initDistortionElementInsertAdjacentHTML$LWS, 'element'], [initDistortionElementOuterHTMLSetter$LWS, 'element'], [initDistortionElementPrepend$LWS, 'element'], [initDistortionElementRemove$LWS, 'element'], [initDistortionElementReplaceChildren$LWS, 'element'], [initDistortionElementReplaceWith$LWS, 'element'], [initDistortionElementSetAttribute$LWS, 'attributes'], [initDistortionElementSetAttributeNode$LWS, 'attributes'], [initDistortionElementSetAttributeNodeNS$LWS, 'attributes'], [initDistortionElementSetAttributeNS$LWS, 'attributes'], [initDistortionElementSetHTML$LWS, 'element'], [initDistortionElementToggleAttribute$LWS, 'attributes'], [initDistortionHistoryPushState$LWS, 'history'], [initDistortionHistoryReplaceState$LWS, 'history'], [initDistortionHTMLElementDatasetGetter$LWS, 'dataset'], [initDistortionHTMLElementStyleGetter$LWS, 'style'], [initDistortionHTMLScriptElementSrcGetter$LWS, 'script'], [initDistortionHTMLScriptElementSrcSetter$LWS, 'script'], [initDistortionHTMLScriptElementTextSetter$LWS, 'script'], [initDistortionIDBObjectStoreAdd$LWS, 'indexedDB'], [initDistortionIDBObjectStorePut$LWS, 'indexedDB'], [initDistortionLocalStorage$LWS, 'storage'], [initDistortionMessagePortPostMessage$LWS, 'postMessage'], [initDistortionNamedNodeMapSetNamedItem$LWS, 'attributes'], [initDistortionNamedNodeMapSetNamedItemNS$LWS, 'attributes'], [initDistortionNavigatorSendBeacon$LWS, 'navigatorSendBeacon'], [initDistortionNodeInsertBefore$LWS, 'node'], [initDistortionNodeRemoveChild$LWS, 'node'], [initDistortionNodeReplaceChild$LWS, 'node'], [initDistortionNodeTextContentGetter$LWS, 'node'], [initDistortionNodeTextContentSetter$LWS, 'node'], [initDistortionNodeValueSetter$LWS, 'node'], [initDistortionNotificationCtor$LWS, 'notification'], [initDistortionPerformanceMark$LWS, 'performance'], [initDistortionPerformanceMarkCtor$LWS, 'performance'], [initDistortionPerformanceMeasure$LWS, 'performance'], [initDistortionRangeCreateContextualFragment$LWS, 'range'], [initDistortionRangeDeleteContents$LWS, 'range'], [initDistortionRangeExtractContents$LWS, 'range'], [initDistortionRangeInsertNode$LWS, 'range'], [initDistortionRangeSelectNode$LWS, 'range'], [initDistortionRangeSelectNodeContents$LWS, 'range'], [initDistortionRangeSetEnd$LWS, 'range'], [initDistortionRangeSetEndAfter$LWS, 'range'], [initDistortionRangeSetEndBefore$LWS, 'range'], [initDistortionRangeSetStart$LWS, 'range'], [initDistortionRangeSetStartAfter$LWS, 'range'], [initDistortionRangeSetStartBefore$LWS, 'range'], [initDistortionRangeSurroundContents$LWS, 'range'], [initDistortionSelectionCollapse$LWS, 'selection'], [initDistortionSelectionExtend$LWS, 'selection'], [initDistortionSelectionSelectAllChildren$LWS, 'selection'], [initDistortionSelectionSetBaseAndExtent$LWS, 'selection'], [initDistortionSelectionSetPosition$LWS, 'selection'], [initDistortionSessionStorage$LWS, 'storage'], [initDistortionShadowRootInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionStorage$LWS, 'storage'], [initDistortionStorageClear$LWS, 'storage'], [initDistortionStorageGetItem$LWS, 'storage'], [initDistortionStorageKey$LWS, 'storage'], [initDistortionStorageLength$LWS, 'storage'], [initDistortionStorageRemoveItem$LWS, 'storage'], [initDistortionStorageSetItem$LWS, 'storage'], [initDistortionSVGElementDatasetGetter$LWS, 'dataset'], [initDistortionSVGElementStyleGetter$LWS, 'style'], [initDistortionSVGScriptElementHrefGetter$LWS, 'script'], [initDistortionSVGScriptElementHrefSetter$LWS, 'script'], [initDistortionWindowFetch$LWS, 'windowFetch'], [initDistortionWindowFramesGetter$LWS, 'windowFrames'], [initDistortionWindowGetComputedStyle$LWS, 'style'], [initDistortionWindowLengthGetter$LWS, 'windowFrames'], [initDistortionWindowPostMessage$LWS, 'postMessage'], [initDistortionWindowSetInterval$LWS, 'setInterval'], [initDistortionWindowSetTimeout$LWS, 'setTimeout'], [initDistortionXMLHttpRequestResponseGetter$LWS, 'xhr'], [initDistortionXMLHttpRequestResponseXMLGetter$LWS, 'xhr']]));
-const DocumentBlockedProperties$LWS = ['createProcessingInstruction', 'exitFullscreen', 'fullscreen', 'fullscreenElement', 'fullscreenEnabled', 'mozCancelFullScreen', 'mozFullScreen', 'mozFullScreenElement', 'mozFullScreenEnabled', 'onfullscreenchange', 'onfullscreenerror', 'onmozfullscreenchange', 'onmozfullscreenerror', 'onrejectionhandled', 'onunhandledrejection', 'releaseCapture', 'releaseEvents', 'webkitFullScreenKeyboardInputAllowed', 'write', 'writeln'];
-const ElementBlockedProperties$LWS = ['mozRequestFullScreen', 'onfullscreenchange', 'onfullscreenerror', 'requestFullscreen', 'webkitRequestFullScreen', 'webkitRequestFullscreen'];
+const distortionFactoryInitializerToggleSwitches$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1([[initDistortionCacheStorageDelete$LWS, 'caches'], [initDistortionCacheStorageHas$LWS, 'caches'], [initDistortionCacheStorageKeys$LWS, 'caches'], [initDistortionCacheStorageMatch$LWS, 'caches'], [initDistortionCacheStorageOpen$LWS, 'caches'], [initDistortionCookieStoreDelete$LWS, 'cookieStore'], [initDistortionCookieStoreGet$LWS, 'cookieStore'], [initDistortionCookieStoreGetAll$LWS, 'cookieStore'], [initDistortionCookieStoreOnChange$LWS, 'cookieStore'], [initDistortionCookieStoreSet$LWS, 'cookieStore'], [initDistortionCSSStyleRuleStyleGetter$LWS, 'style'], [initDistortionCustomElementRegistryDefine$LWS, 'customElements'], [initDistortionCustomElementRegistryGet$LWS, 'customElements'], [initDistortionCustomElementRegistryUpgrade$LWS, 'customElements'], [initDistortionCustomElementRegistryWhenDefined$LWS, 'customElements'], [initDistortionDocumentCookieGetter$LWS, 'documentCookie'], [initDistortionDocumentCookieSetter$LWS, 'documentCookie'], [initDistortionDocumentDomainSetter$LWS, 'documentDomain'], [initDistortionDocumentExecCommand$LWS, 'documentExecCommand'], [initDistortionDOMParserParseFromString$LWS, 'domParserParseFromString'], [initDistortionElementAfter$LWS, 'element'], [initDistortionElementAppend$LWS, 'element'], [initDistortionElementAttributesGetter$LWS, 'attributes'], [initDistortionElementBefore$LWS, 'element'], [initDistortionElementGetInnerHTML$LWS, 'innerHTML'], [initDistortionElementInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionElementInsertAdjacentElement$LWS, 'element'], [initDistortionElementInsertAdjacentHTML$LWS, 'element'], [initDistortionElementOuterHTMLSetter$LWS, 'element'], [initDistortionElementPrepend$LWS, 'element'], [initDistortionElementRemove$LWS, 'element'], [initDistortionElementReplaceChildren$LWS, 'element'], [initDistortionElementReplaceWith$LWS, 'element'], [initDistortionElementSetAttribute$LWS, 'attributes'], [initDistortionElementSetAttributeNode$LWS, 'attributes'], [initDistortionElementSetAttributeNodeNS$LWS, 'attributes'], [initDistortionElementSetAttributeNS$LWS, 'attributes'], [initDistortionElementSetHTML$LWS, 'element'], [initDistortionElementToggleAttribute$LWS, 'attributes'], [initDistortionHistoryPushState$LWS, 'history'], [initDistortionHistoryReplaceState$LWS, 'history'], [initDistortionHTMLElementDatasetGetter$LWS, 'dataset'], [initDistortionHTMLElementStyleGetter$LWS, 'style'], [initDistortionHTMLScriptElementSrcGetter$LWS, 'script'], [initDistortionHTMLScriptElementSrcSetter$LWS, 'script'], [initDistortionHTMLScriptElementTextSetter$LWS, 'script'], [initDistortionIDBObjectStoreAdd$LWS, 'indexedDB'], [initDistortionIDBObjectStorePut$LWS, 'indexedDB'], [initDistortionLocalStorage$LWS, 'storage'], [initDistortionMessagePortPostMessage$LWS, 'postMessage'], [initDistortionNamedNodeMapSetNamedItem$LWS, 'attributes'], [initDistortionNamedNodeMapSetNamedItemNS$LWS, 'attributes'], [initDistortionNavigatorSendBeacon$LWS, 'navigatorSendBeacon'], [initDistortionNodeInsertBefore$LWS, 'node'], [initDistortionNodeRemoveChild$LWS, 'node'], [initDistortionNodeReplaceChild$LWS, 'node'], [initDistortionNodeTextContentGetter$LWS, 'node'], [initDistortionNodeTextContentSetter$LWS, 'node'], [initDistortionNodeValueSetter$LWS, 'node'], [initDistortionNotificationCtor$LWS, 'notification'], [initDistortionPerformanceMark$LWS, 'performance'], [initDistortionPerformanceMarkCtor$LWS, 'performance'], [initDistortionPerformanceMeasure$LWS, 'performance'], [initDistortionRangeCreateContextualFragment$LWS, 'range'], [initDistortionRangeDeleteContents$LWS, 'range'], [initDistortionRangeExtractContents$LWS, 'range'], [initDistortionRangeInsertNode$LWS, 'range'], [initDistortionRangeSelectNode$LWS, 'range'], [initDistortionRangeSelectNodeContents$LWS, 'range'], [initDistortionRangeSetEnd$LWS, 'range'], [initDistortionRangeSetEndAfter$LWS, 'range'], [initDistortionRangeSetEndBefore$LWS, 'range'], [initDistortionRangeSetStart$LWS, 'range'], [initDistortionRangeSetStartAfter$LWS, 'range'], [initDistortionRangeSetStartBefore$LWS, 'range'], [initDistortionRangeSurroundContents$LWS, 'range'], [initDistortionSelectionCollapse$LWS, 'selection'], [initDistortionSelectionExtend$LWS, 'selection'], [initDistortionSelectionSelectAllChildren$LWS, 'selection'], [initDistortionSelectionSetBaseAndExtent$LWS, 'selection'], [initDistortionSelectionSetPosition$LWS, 'selection'], [initDistortionSessionStorage$LWS, 'storage'], [initDistortionShadowRootInnerHTMLSetter$LWS, 'innerHTML'], [initDistortionStorage$LWS, 'storage'], [initDistortionStorageClear$LWS, 'storage'], [initDistortionStorageGetItem$LWS, 'storage'], [initDistortionStorageKey$LWS, 'storage'], [initDistortionStorageLength$LWS, 'storage'], [initDistortionStorageRemoveItem$LWS, 'storage'], [initDistortionStorageSetItem$LWS, 'storage'], [initDistortionSVGElementDatasetGetter$LWS, 'dataset'], [initDistortionSVGElementStyleGetter$LWS, 'style'], [initDistortionSVGScriptElementHrefGetter$LWS, 'script'], [initDistortionSVGScriptElementHrefSetter$LWS, 'script'], [initDistortionWindowFetch$LWS, 'windowFetch'], [initDistortionWindowFramesGetter$LWS, 'windowFrames'], [initDistortionWindowGetComputedStyle$LWS, 'style'], [initDistortionWindowLengthGetter$LWS, 'windowFrames'], [initDistortionWindowPostMessage$LWS, 'postMessage'], [initDistortionWindowSetInterval$LWS, 'setInterval'], [initDistortionWindowSetTimeout$LWS, 'setTimeout'], [initDistortionXMLHttpRequestResponseGetter$LWS, 'xhr'], [initDistortionXMLHttpRequestResponseXMLGetter$LWS, 'xhr']]));
+const DocumentBlockedProperties$LWS = ['createProcessingInstruction', 'exitFullscreen', 'fullscreen', 'fullscreenElement', 'fullscreenEnabled', 'mozCancelFullScreen', 'mozFullScreen', 'mozFullScreenElement', 'mozFullScreenEnabled', 'onfullscreenchange', 'onfullscreenerror', 'onmozfullscreenchange', 'onmozfullscreenerror', 'onrejectionhandled', 'onunhandledrejection', 'parseHTMLUnsafe', 'releaseCapture', 'releaseEvents', 'webkitFullScreenKeyboardInputAllowed', 'write', 'writeln'];
+const ElementBlockedProperties$LWS = ['mozRequestFullScreen', 'onfullscreenchange', 'onfullscreenerror', 'requestFullscreen', 'setHTMLUnsafe', 'webkitRequestFullScreen', 'webkitRequestFullscreen'];
 const EventBlockedProperties$LWS = ['originalTarget', 'explicitOriginalTarget'];
 const HTMLElementBlockedAttributes$LWS = ['nonce'];
 const HTMLElementBlockedProperties$LWS = ['nonce', 'onrejectionhandled', 'onunhandledrejection'];
@@ -9916,7 +10108,7 @@ const SVGElementBlockedProperties$LWS = ['nonce'];
 const UIEventBlockedProperties$LWS = ['rangeParent'];
 const WindowBlockedProperties$LWS = ['find', 'requestFileSystem', 'webkitRequestFileSystem'];
 const XSLTProcessorBlockedProperties$LWS = ['transformToDocument', 'transformToFragment'];
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 /*!
  * Copyright (C) 2019 salesforce.com, inc.
@@ -9956,17 +10148,145 @@ function getSandboxRegistry$LWS(document$LWS) {
 const LightningWebSecurity$LWS = {
   __proto__: null
 };
-toSafeMap$LWS$1(new MapCtor$LWS$1());
+// Flag to allow distortions to be "toggle-able".
+const ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS = LOCKER_UNMINIFIED_FLAG$LWS$1 || /* istanbul ignore next */false || /* istanbul ignore next */false;
+const distortionFactoryToToggleSwitch$LWS = ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS ? toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1()) : /* istanbul ignore next */null;
+const sandboxToDistortionEntryToToggleSwitchRegistry$LWS = ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS ? toSafeWeakMap$LWS$1(
+// The value must be a Map because its entries are iterated over in lws.ts
+new WeakMapCtor$LWS$1()) : /* istanbul ignore next */null;
+const sandboxToDisabledDistortionToggleSwitches$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
+function setSandboxDistortionToggleState$LWS(record$LWS, toggleSwitchName$LWS, state$LWS) {
+  const disabledDistortionToggleSwitches$LWS = sandboxToDisabledDistortionToggleSwitches$LWS.get(record$LWS);
+  if (state$LWS) {
+    disabledDistortionToggleSwitches$LWS == null || disabledDistortionToggleSwitches$LWS.delete(toggleSwitchName$LWS);
+  } else {
+    disabledDistortionToggleSwitches$LWS == null || disabledDistortionToggleSwitches$LWS.add(toggleSwitchName$LWS);
+  }
+}
+function getSandboxDistortionToggleState$LWS(record$LWS, toggleSwitchName$LWS) {
+  const disabledDistortionToggleSwitches$LWS = sandboxToDisabledDistortionToggleSwitches$LWS.get(record$LWS);
+  // If there are active toggle switches, check for the presense of the specific
+  // toggle switch name in question. If the toggle switch name is present, then
+  // the distortion is disabled:
+  //
+  // Distortion is enabled? Return true
+  // Distortion is disabled? Return false
+  return !disabledDistortionToggleSwitches$LWS.has(toggleSwitchName$LWS);
+}
+// Will be assigned the composed object value as:
+//
+// namespaces = {
+//      ...ns = {
+//          distortions: {
+//              ...distortion toggle switch flag: true | false
+//          }
+//      }
+// }
+//
+// This is created once and only upon the first access of $LWS.namespaces
+let namespaces$LWS = null;
+// This should only be created in DEBUG/COVERAGE mode
+if (ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS) {
+  ReflectDefineProperty$LWS$1(LightningWebSecurity$LWS, 'namespaces', {
+    __proto__: null,
+    enumerable: true,
+    configurable: false,
+    get() {
+      // Ensure that the above described namespaces object is only createed once.
+      if (!namespaces$LWS) {
+        namespaces$LWS = {
+          __proto__: null
+        };
+        // Use the current document to get the sandbox registry to derive a list
+        // of all sandbox keys corresponding to all created sandboxes.
+        const registry$LWS = getSandboxRegistry$LWS(document);
+        const sandboxKeys$LWS = ReflectApply$LWS$1(ObjectKeys$LWS$1, null, [registry$LWS]);
+        // Construct a list of distortion flags (as object accessors) for each sandbox,
+        // accessible by sandbox key.
+        for (const sandboxKey$LWS of sandboxKeys$LWS) {
+          const record$LWS = registry$LWS[sandboxKey$LWS];
+          // istanbul ignore next: optional chaining and nullish coalescing results in an expansion that contains an unreachable "void 0" branch for every occurrence of the operator
+          const distortionToggleSwitchRegistry$LWS = sandboxToDistortionEntryToToggleSwitchRegistry$LWS == null ? void 0 : sandboxToDistortionEntryToToggleSwitchRegistry$LWS.get(record$LWS);
+          const seenFlags$LWS = toSafeSet$LWS(new SetCtor$LWS$1());
+          const distortions$LWS = {
+            __proto__: null
+          };
+          namespaces$LWS[sandboxKey$LWS] = {
+            __proto__: null,
+            distortions: distortions$LWS
+          };
+          for (const {
+            1: flag$LWS
+          } of distortionToggleSwitchRegistry$LWS) {
+            if (!seenFlags$LWS.has(flag$LWS)) {
+              seenFlags$LWS.add(flag$LWS);
+              ReflectDefineProperty$LWS$1(namespaces$LWS[sandboxKey$LWS].distortions, flag$LWS, {
+                __proto__: null,
+                enumerable: true,
+                configurable: false,
+                get() {
+                  return getSandboxDistortionToggleState$LWS(record$LWS, flag$LWS);
+                },
+                set(flagValue$LWS) {
+                  return setSandboxDistortionToggleState$LWS(record$LWS, flag$LWS, flagValue$LWS);
+                }
+              });
+            }
+          }
+          ObjectPreventExtensions$LWS(distortions$LWS);
+        }
+        ObjectPreventExtensions$LWS(namespaces$LWS);
+      }
+      return namespaces$LWS;
+    }
+  });
+  ReflectDefineProperty$LWS$1(window, '$LWS', {
+    __proto__: null,
+    enumerable: false,
+    configurable: false,
+    writable: false,
+    value: LightningWebSecurity$LWS
+  });
+}
 ObjectFreeze$LWS$1(LightningWebSecurity$LWS);
 // If ENABLE_DISTORTION_TOGGLE_SWITCHES = false, this will just be undefined
 const $LWS = window.$LWS;
+function createDistortionToggleSwitchWrapper$LWS(sandboxKey$LWS, toggleSwitchName$LWS, proxyMaskedFunctionDistortion$LWS, originalValue$LWS) {
+  // The distortion function value wrapper is necessary because these switches can only be activated _after_
+  // the sandbox is created, which means the distortion registry has already been processed, with redefined
+  // descriptors already set. Once that is done, there is no way to affect the behavior of a distortion
+  // during runtime without wrapping the distortion function value with a function that side channel communicates
+  // with the exposed flags interface.
+  // eslint-disable-next-line @typescript-eslint/no-loop-func
+  return function (...args$LWS) {
+    var _root$LWS$namespaces$LWS;
+    const {
+      $LWS: root$LWS
+    } = rootWindow$LWS$1;
+    // If no toggleSwitchName is defined, then always use the distorted value
+    // If a toggleSwitchName exists and the corresponding flag in this sandbox
+    // has been set to false, then the distortion is toggled off and we need to
+    // use the undistorted value
+    let useDistortedValue$LWS = root$LWS == null || (_root$LWS$namespaces$LWS = root$LWS.namespaces) == null || (_root$LWS$namespaces$LWS = _root$LWS$namespaces$LWS[sandboxKey$LWS]) == null ? void 0 : _root$LWS$namespaces$LWS.distortions[toggleSwitchName$LWS];
+    // If there is a toggleSwitchName, but there is currently no
+    // boolean value for that toggleSwitchName, then use the distorted value.
+    if (useDistortedValue$LWS === undefined) {
+      useDistortedValue$LWS = true;
+    }
+    const constructOrApplyTarget$LWS = useDistortedValue$LWS ? proxyMaskedFunctionDistortion$LWS : originalValue$LWS;
+    if (new.target) {
+      return ReflectConstruct$LWS(constructOrApplyTarget$LWS, args$LWS, new.target);
+    }
+    return ReflectApply$LWS$1(constructOrApplyTarget$LWS, this, args$LWS);
+  };
+}
 const distortionFactoriesCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
 const opaqueWindowPostMessageDistortionFactoryCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
 // WebKit based browsers have a bug that prematurely removes distortion entries
 // from the distortions weak map.
 const SUPPORTS_DISTORTIONS_WEAK_MAP$LWS = !IS_WEBKIT_BROWSER$LWS;
 function createDistortionEntries$LWS(record$LWS, factories$LWS) {
-  toSafeMap$LWS$1(new MapCtor$LWS$1());
+  const distortionEntryToToggleSwitch$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
   const entries$LWS = [];
   for (let i$LWS = 0, {
       length: length$LWS
@@ -9980,7 +10300,21 @@ function createDistortionEntries$LWS(record$LWS, factories$LWS) {
       } = entry$LWS;
       if (typeof originalValue$LWS === 'function') {
         const proxyMaskedFunctionDistortion$LWS = proxyMaskFunctionDistortion$LWS(record$LWS, factory$LWS, distortedValue$LWS, originalValue$LWS);
-        entries$LWS[entries$LWS.length] = [originalValue$LWS, proxyMaskedFunctionDistortion$LWS];
+        const toggleSwitchName$LWS = ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS && ( /* istanbul ignore next: optional chaining and nullish coalescing results in an expansion that contains an unreachable "void 0" branch for every occurrence of the operator */distortionFactoryToToggleSwitch$LWS == null ? void 0 : distortionFactoryToToggleSwitch$LWS.get(factory$LWS));
+        let distortionToggleSwitchWrapperOrProxyMaskedFunction$LWS = proxyMaskedFunctionDistortion$LWS;
+        if (ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS && toggleSwitchName$LWS) {
+          distortionToggleSwitchWrapperOrProxyMaskedFunction$LWS = createDistortionToggleSwitchWrapper$LWS(record$LWS.key, toggleSwitchName$LWS, proxyMaskedFunctionDistortion$LWS, originalValue$LWS);
+          // If the distorted API originated in a window created via window.open or
+          // document.open, it may be marked as an unsafe property. If so, we need
+          // to transfer the original value's marker to the wrapped toggle switch
+          // function to ensure that the distortion itself can find the marker when
+          // checking if it needs to be blocked.
+          if (originalValue$LWS[CHILD_WINDOW_BLOCKED_PROPERTY_SYMBOL$LWS]) {
+            const descriptor$LWS = ReflectGetOwnPropertyDescriptor$LWS(originalValue$LWS, CHILD_WINDOW_BLOCKED_PROPERTY_SYMBOL$LWS);
+            ReflectDefineProperty$LWS$1(distortionToggleSwitchWrapperOrProxyMaskedFunction$LWS, CHILD_WINDOW_BLOCKED_PROPERTY_SYMBOL$LWS, descriptor$LWS);
+          }
+        }
+        entries$LWS[entries$LWS.length] = [originalValue$LWS, toggleSwitchName$LWS ? distortionToggleSwitchWrapperOrProxyMaskedFunction$LWS : proxyMaskedFunctionDistortion$LWS];
       } else {
         // istanbul ignore else: current tests have no way of expressing a state that would cause this condition to evaluate false
         if (typeof originalValue$LWS === 'object' && originalValue$LWS !== null) {
@@ -9989,8 +10323,20 @@ function createDistortionEntries$LWS(record$LWS, factories$LWS) {
           entries$LWS[entries$LWS.length] = entry$LWS;
         }
       }
+      if (ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS) {
+        /* istanbul ignore next: optional chaining and nullish coalescing results in an expansion that contains an unreachable "void 0" branch for every occurrence of the operator */
+        const toggleSwitchName$LWS = distortionFactoryToToggleSwitch$LWS == null ? void 0 : distortionFactoryToToggleSwitch$LWS.get(factory$LWS);
+        if (toggleSwitchName$LWS) {
+          // Map the just added distortion entry to this toggle switch name
+          distortionEntryToToggleSwitch$LWS.set(entries$LWS[entries$LWS.length - 1], toggleSwitchName$LWS);
+        }
+      }
     }
   }
+  if (ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS) {
+    sandboxToDistortionEntryToToggleSwitchRegistry$LWS == null || sandboxToDistortionEntryToToggleSwitchRegistry$LWS.set(record$LWS, distortionEntryToToggleSwitch$LWS);
+    sandboxToDisabledDistortionToggleSwitches$LWS.set(record$LWS, toSafeSet$LWS(new SetCtor$LWS$1()));
+  }
   return entries$LWS;
 }
 function createDistortionMap$LWS(entries$LWS) {
@@ -10026,6 +10372,7 @@ function getDistortionFactories$LWS(record$LWS) {
   addBlockedAttributeDistortionFactoryInitializers$LWS(HTMLIFrameElement$LWS, 'HTMLIFrameElement', HTMLIFrameElementBlockedAttributes$LWS, initializers$LWS);
   addBlockedAttributeDistortionFactoryInitializers$LWS(HTMLScriptElement$LWS, 'HTMLScriptElement', HTMLScriptElementBlockedAttributes$LWS, initializers$LWS);
   addBlockedAttributeDistortionFactoryInitializers$LWS(SVGElement$LWS, 'SVGElement', SVGElementBlockedAttributes$LWS, initializers$LWS);
+  addBlockedPropertyDistortionFactoryInitializers$LWS(record$LWS, DataTransfer.prototype, DataTransferBlockedProperties$LWS, initializers$LWS);
   addBlockedPropertyDistortionFactoryInitializers$LWS(record$LWS, Document$LWS.prototype, DocumentBlockedProperties$LWS, initializers$LWS);
   addBlockedPropertyDistortionFactoryInitializers$LWS(record$LWS, Element$LWS.prototype, ElementBlockedProperties$LWS, initializers$LWS);
   addBlockedPropertyDistortionFactoryInitializers$LWS(record$LWS, Event$LWS.prototype, EventBlockedProperties$LWS, initializers$LWS);
@@ -10047,7 +10394,19 @@ function getDistortionFactories$LWS(record$LWS) {
   for (let i$LWS = 0, {
       length: length$LWS
     } = factories$LWS; i$LWS < length$LWS; i$LWS += 1) {
+    let toggleSwitchName$LWS;
+    // Restrict this operation to debug/development/coverage mode only
+    if (ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS) {
+      toggleSwitchName$LWS = distortionFactoryInitializerToggleSwitches$LWS.get(initializers$LWS[i$LWS]);
+    }
     factories$LWS[i$LWS] = initializers$LWS[i$LWS](record$LWS);
+    // Restrict this operation to debug/development/coverage mode only.
+    // Since we actually need the _factory_ to when creating the toggle-able
+    // distortion wrapper, map the factory provided by the initializer to the
+    // toggle switch name.
+    if (ENABLE_DISTORTION_TOGGLE_SWITCHES$LWS && toggleSwitchName$LWS) {
+      distortionFactoryToToggleSwitch$LWS == null || distortionFactoryToToggleSwitch$LWS.set(factories$LWS[i$LWS], toggleSwitchName$LWS);
+    }
   }
   // Finalize attribute distortions last because the attribute registry is
   // populated by the other distortion factories.
@@ -14931,9 +15290,9 @@ function createEvalHelpersFactoryArgs$LWS(record$LWS) {
         prototype: HTMLScriptElementProto$LWS
       }
     },
-    root: root$LWS
+    root: _root$LWS
   } = record$LWS;
-  const isRootRecord$LWS = record$LWS === root$LWS;
+  const isRootRecord$LWS = record$LWS === _root$LWS;
   const forOfStateCache$LWS = toSafeMap$LWS$1(new MapCtor$LWS$1());
   const resourcePromiseCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
   const resourceStatusCache$LWS = toSafeWeakMap$LWS$1(new WeakMapCtor$LWS$1());
@@ -15129,7 +15488,7 @@ function toSourceText$LWS(value$LWS, sourceType$LWS) {
   // tools from mistaking the regexp or the replacement string for an
   // actual source mapping URL.
   /\/\/# sandbox(?=MappingURL=.*?\s*$)/, '//# source']);
-  sourceText$LWS = `\n//# LWS Version = "0.22.1"\n${sourceText$LWS}`;
+  sourceText$LWS = `\n//# LWS Version = "0.22.4"\n${sourceText$LWS}`;
   return sourceType$LWS === 1 /* SourceType.Module */ && indexOfPragma$LWS(sourceText$LWS, 'use strict') === -1 ?
   // Append "'use strict'" to the extracted function body so it is
   // evaluated in strict mode.
@@ -15216,7 +15575,7 @@ function createVirtualEnvironment$LWS(record$LWS) {
     globalObject: globalObject$LWS,
     instrumentation: instrumentation$LWS,
     key: key$LWS,
-    root: root$LWS,
+    root: _root$LWS,
     root: {
       distortions: distortions$LWS
     },
@@ -15277,7 +15636,7 @@ function createVirtualEnvironment$LWS(record$LWS) {
                 globalObject: originalTarget$LWS,
                 key: key$LWS,
                 type: type$LWS
-              }, root$LWS);
+              }, _root$LWS);
               return originalTarget$LWS;
             }
             // eslint-disable-next-line no-empty
@@ -15308,7 +15667,7 @@ function createVirtualEnvironment$LWS(record$LWS) {
           globalObject: originalTargetWindow$LWS,
           key: key$LWS,
           type: type$LWS
-        }, root$LWS);
+        }, _root$LWS);
       }
       return originalTarget$LWS;
     },
@@ -15319,7 +15678,9 @@ function createVirtualEnvironment$LWS(record$LWS) {
     ObjectAssign$LWS$1({}, DEFAULT_ENDOWMENTS_DESCRIPTOR_MAP$LWS, ObjectGetOwnPropertyDescriptors$LWS(endowments$LWS)) : DEFAULT_ENDOWMENTS_DESCRIPTOR_MAP$LWS,
     instrumentation: instrumentation$LWS,
     remapTypedArrays: remapTypedArrays$LWS,
-    keepAlive: IFRAME_KEEP_ALIVE_FLAG$LWS,
+    keepAlive:
+    // istanbul ignore next: cannot test isLockerFeatureEnabled
+    !remapTypedArrays$LWS && isLockerFeatureEnabled$LWS('isLockerNextForOmnistudioEnabled') || IFRAME_KEEP_ALIVE_FLAG$LWS,
     liveTargetCallback: isTargetLive$LWS,
     signSourceCallback: sourceText$LWS => trusted.createScript(sourceText$LWS)
   });
@@ -15398,7 +15759,7 @@ function createOpaqueSecondaryWindowSandboxRecord$LWS({
   key: key$LWS,
   // istanbul ignore next: destructured default assignments are not correctly instrumented
   type: type$LWS = /* istannul ignore next: nothing works to ignore these */getDefaultType$LWS(key$LWS)
-}, root$LWS) {
+}, _root$LWS) {
   const sandboxRegistry$LWS = getOpaqueSandboxRegistry$LWS(globalObject$LWS);
   let record$LWS = sandboxRegistry$LWS[key$LWS];
   // istanbul ignore if: calls that would evaluate to true here ARE tested (see packages/integration-karma/test/distortions/HTMLIFrameElement/untrusted/snippets.js, "doesNotThrowOnCreationOrAccessOfCrossOriginIframeContentWindow"), but reported as uncovered
@@ -15411,7 +15772,7 @@ function createOpaqueSecondaryWindowSandboxRecord$LWS({
     LOCKER_VERBOSE_INSTRUMENTATION_FLAG: LOCKER_VERBOSE_INSTRUMENTATION_FLAG$LWS,
     distortions: distortions$LWS,
     instrumentation: instrumentation$LWS
-  } = root$LWS;
+  } = _root$LWS;
   record$LWS = {
     BASIC_INSTRUMENTATION_DATA: BASIC_INSTRUMENTATION_DATA$LWS,
     LOCKER_INSTRUMENTATION_FLAG: LOCKER_INSTRUMENTATION_FLAG$LWS,
@@ -15425,7 +15786,7 @@ function createOpaqueSecondaryWindowSandboxRecord$LWS({
     helpers: EMPTY_EVAL_HELPERS$LWS,
     instrumentation: instrumentation$LWS,
     key: key$LWS,
-    root: root$LWS,
+    root: _root$LWS,
     sandboxEvaluator: noop$LWS$1,
     type: type$LWS,
     virtualEnvironmentEvaluator: noop$LWS$1
@@ -15458,7 +15819,7 @@ function createSecondaryWindowSandboxRecord$LWS({
   key: key$LWS,
   // istanbul ignore next: destructured default assignments are not correctly instrumented
   type: type$LWS = /* istanbul ignore next: currently unreachable via tests */getDefaultType$LWS(key$LWS)
-}, root$LWS) {
+}, _root$LWS) {
   const sandboxRegistry$LWS = getSandboxRegistry$LWS(document$LWS);
   let record$LWS = sandboxRegistry$LWS[key$LWS];
   if (record$LWS) {
@@ -15470,7 +15831,7 @@ function createSecondaryWindowSandboxRecord$LWS({
     LOCKER_VERBOSE_INSTRUMENTATION_FLAG: LOCKER_VERBOSE_INSTRUMENTATION_FLAG$LWS,
     distortions: distortions$LWS,
     instrumentation: instrumentation$LWS
-  } = root$LWS;
+  } = _root$LWS;
   const {
     location: location$LWS,
     top: top$LWS
@@ -15498,7 +15859,7 @@ function createSecondaryWindowSandboxRecord$LWS({
     helpers: EMPTY_EVAL_HELPERS$LWS,
     instrumentation: instrumentation$LWS,
     key: key$LWS,
-    root: root$LWS,
+    root: _root$LWS,
     sandboxEvaluator: noop$LWS$1,
     type: type$LWS,
     virtualEnvironmentEvaluator: noop$LWS$1
@@ -15551,7 +15912,7 @@ function createSecondaryWindowSandboxRecord$LWS({
           globalObject: globalObject$LWS,
           key: key$LWS,
           type: type$LWS
-        }, root$LWS);
+        }, _root$LWS);
       }
     } catch (_unused40$LWS) {
       // istanbul ignore next: this is a safety precaution that is unreachable via tests
@@ -15559,7 +15920,7 @@ function createSecondaryWindowSandboxRecord$LWS({
         globalObject: globalObject$LWS,
         key: key$LWS,
         type: type$LWS
-      }, root$LWS);
+      }, _root$LWS);
     }
   };
   const frameElement$LWS = ReflectApply$LWS$1(WindowFrameElementGetter$LWS, globalObject$LWS, []);
@@ -15598,7 +15959,7 @@ function createSecondaryWindowSandboxRecord$LWS({
             globalObject: globalObject$LWS,
             key: key$LWS,
             type: type$LWS
-          }, root$LWS);
+          }, _root$LWS);
         }
       });
     },
@@ -15809,9 +16170,27 @@ function wrapPlatformResourceLoader$LWS(dep$LWS, key$LWS) {
     return secureDep$LWS;
   }
   secureDep$LWS = {
-    loadScript: (thisArg$LWS, url$LWS) => createRootWindowSandboxRecord$LWS({
-      key: key$LWS
-    }).helpers.loadScript(thisArg$LWS, url$LWS),
+    loadScript: (thisArg$LWS, url$LWS, config$LWS) => {
+      const sandbox$LWS = createRootWindowSandboxRecord$LWS({
+        key: key$LWS
+      });
+      if (isGaterEnabledFeature$LWS('enableTrustedMode') && config$LWS != null && config$LWS.trustedMode) {
+        const trustedGlobals$LWS = config$LWS.trustedGlobals;
+        if ((trustedGlobals$LWS == null ? void 0 : trustedGlobals$LWS.length) > 0) {
+          return dep$LWS.loadScript(thisArg$LWS, url$LWS).then(() => {
+            const installGlobals$LWS = sandbox$LWS.virtualEnvironmentEvaluator(`(list) => list.forEach(([key, get, set]) => Object.defineProperty(window, key, { get, set, configurable: true, enumerable: true }));`);
+            const globals$LWS = trustedGlobals$LWS.map(globalName$LWS => [globalName$LWS, function get$LWS() {
+              return window[globalName$LWS];
+            }, function set$LWS(value$LWS) {
+              window[globalName$LWS] = value$LWS;
+            }]);
+            installGlobals$LWS(globals$LWS);
+          });
+        }
+        return dep$LWS.loadScript(thisArg$LWS, url$LWS);
+      }
+      return sandbox$LWS.helpers.loadScript(thisArg$LWS, url$LWS);
+    },
     loadStyle: (thisArg$LWS, url$LWS) => createRootWindowSandboxRecord$LWS({
       key: key$LWS
     }).helpers.loadStyle(thisArg$LWS, url$LWS)
@@ -15819,7 +16198,7 @@ function wrapPlatformResourceLoader$LWS(dep$LWS, key$LWS) {
   depRegistry$LWS.set(dep$LWS, secureDep$LWS);
   return secureDep$LWS;
 }
-/*! version: 0.22.1 */
+/*! version: 0.22.4 */
 
 export { $LWS, CORE_SANDBOX_KEY$LWS as CORE_SANDBOX_KEY, createRootWindowSandboxRecord$LWS as createRootWindowSandboxRecord, evaluateFunction$LWS as evaluateFunction, evaluateInCoreSandbox$LWS as evaluateInCoreSandbox, evaluateInSandbox$LWS as evaluateInSandbox, trusted, wrapDependency$LWS as wrapDependency };
 //# sourceMappingURL=lockerSandbox.js.map