dompurify: DOMPurify USE_PROFILES prototype pollution allows event handlers · Teire