How I could bypass DOMPurify with XML