Current version of DOMly is vulnerable as you can see in this report : https://snyk.io/test/github/lazd/DOMly This issue is about fixing those vulnerabilities. (Could be similar to https://github.com/lazd/DOMly/issues/34)