Fix defuse.pollute() and improve handling for whether we are using node or the browser