dompurify: DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS · Teire