Describe the bug Passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html (), .append (), and others) may execute untrusted code (see ...