Clientside output purifying

[xHeaven]

Purify the output on the client via DOMPurify instead of using htmlentities() on the backend.
Kinda reverts #107.

This makes it so we can use colored outputs - therefore keeps the style of dump(), which is fine in my opinion -, but it removes stuff like <script>alert(0)</script> from the output, fixing the possibility of XSS attacks.

See the comparison:

Old method:

New method:

[freekmurze]

Thanks!