CVE-2024-47875 — DOMPurify bypass on sandboxed iframes

A DOMPurify bypass let an attacker smuggle executable JavaScript through the sanitizer under specific parser conditions, re-enabling XSS in apps that relied on DOMPurify as the only defense.