May 13 2021 Aurelia framework’s default HTML sanitizer opens the door to XSS attacks Source Contributor slowdown indicates a patch may not be in the works [...]