I know of exactly one JavaScript template engine that automatically updates the page when the model changes and that's also compatible with the Content Security Policy enforced for Chrome Apps (packaged apps): AngularJS. However, AngularJS is much more than just a template engine. I'm looking for something much lighter-weight. KnockoutJS would be perfect, if only it worked for Chrome Apps.
Sandboxing the templated page is out of the question for my purposes.
Does anyone know of an alternative to AngularJS for this purpose?
UPDATE: Just came across Distal, which seems to be CSP compliant. It's not as dynamic as AngularJS (with its $watch facility), but with Distal you can at least re-render just small fragments of the page when the model changes. The link is: https://code.google.com/p/distal/
UPDATE #2: Been using Distal with WatchJS, with much success.