lgtm,codescanning
* Some methods from the DOM API are now modeled more precisely, potentially
  leading to more `js/xss` results.