NPM: DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes

NPM: DOMPurify SAFEFORTEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes vulnerability discovered by ? in WordPress npm dompurify versions = 3.4.4, = 3.4.16...