In the end, I had to add "tainting" for all DOMParser elements. Any tainted element couldn't be inserted into the DOM. All of those escapes were quite bad, but not catastrophic, given that JS would only run when clicked on the malicious user tile.
Подростки распылили перцовый баллончик на пассажиров электрички под Петербургом20:54，推荐阅读clash下载 - clash官方网站获取更多信息
《女人不败》（The Impregnable Women）书影。。Feiyi对此有专业解读
Generic build instructions (works for most Linux distros)，推荐阅读体育直播获取更多信息