:bug: fix: sanitize innerHTML with dompurify

[yangkeni]

💻 变更类型 | Change Type

• [ ] ✨ feat
• [x] 🐛 fix
• [ ] ♻️ refactor
• [ ] 💄 style
• [ ] 🔨 chore
• [ ] ⚡️ perf
• [ ] 📝 docs

🔀 变更说明 | Description of Change

• add dompurify to sanitize dangerouslyInnerHTML

📝 补充信息 | Additional Information

with code below in highlight:

<img src="" onerror="alert()">
<a href="javascript:alert()">hey</a>

• previous get xss

• after normally displayed

[ONLY-yours]

nice change