frontend

• CVE-2026-44990 - sanitize-html xmp raw-text XSS 2026-06-11
• CVE-2026-47423 - DOMPurify selectedcontent re-clone XSS 2026-06-06