xss_sanitize_tagged_literal.html

 <script src="https://cdnjs.cloudflare.com/ajax/libs/dompurify/0.8.2/purify.min.js"></script>
 <script>
 function sanitize(strings, ...values) {
    const dirty = strings.reduce((prev, next, i) => `${prev}${next}${values[i] || ''}`, '');
    console.log(dirty);
    console.log(aboutMe);
    return DOMPurify.sanitize(aboutMe);
  }

  const name = 'petyr baelish';
  const aboutMe = `I love to do evil <img src="http://unsplash.it/100/100?random" onload="alert('I hacked you. Haha');" />`;

  const html = sanitize`
    <h3>${name}</h3>
    <p>${aboutMe}</p>
  `;
  </script>