I'm pretty sure this use of `innerHTML` is safe, like https://github.com/cmcnulty/sizzle/blob/sizzle-174/src/sizzle.js#L617 and https://github.com/cmcnulty/sizzle/blob/sizzle-174/src/sizzle.js#L2013 ... only [some attributes](https://github.com/cmcnulty/sizzle/blob/sizzle-174/src/sizzle.js#L641) are restricted.