Esbuild XSS Bug That Survived 5B Downloads and Bypassed HTML Sanitization