[lit-element] unsafeHTML directive but without javascript execution

[wparad]

Should this be an RFC?

• This is not a substantial change

Which package is this a feature request for?

Lit Core (lit / lit-html / lit-element / reactive-element)

Description

As far as I can tell there is no way to allow unsafeHTML to interpolate html but exclude <script> tags from executing. This would be a great security improvement because often there's very little reason to support <script> tags in unsafeHTML.

Alternatives and Workarounds

None aside from manually finding and replacing <script> tags.