Bug 1596058 [wpt PR 20228] - [Trusted Types] Cover attribute node man…

…ipulation with Trusted Types checks., a=testonly

Automatic update from web-platform-tests
[Trusted Types] Cover attribute node manipulation with Trusted Types checks.

Element::setAttribute will perform trusted types checks, which (currently)
can be circumvented by obtaining the DOM's attribute node and setting the
value directly. This fixes this bypass, by performing identical checks when
the attribute node values are set, and/or the attribute node is attached to
an element.

Bug: 1008012
Bug: w3c/trusted-types#47
Change-Id: I1d8ead85b3fa11821c329e1f4af60c1e85ea8298
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/1911215
Commit-Queue: Daniel Vogelheim <vogelheimchromium.org>
Reviewed-by: Mike West <mkwstchromium.org>
Cr-Commit-Position: refs/heads/master{#716193}

--

wpt-commits: 36362f1a77faf18831c8b596e7b5bee081629817
wpt-pr: 20228

UltraBlame original commit: 5765ef6d9f1a1d561d37a365cda5c2084245145f