dompurify: DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode · Teire