fix: remove unsafe exec() in dom.mdx

[orbisai0security]

Summary

Fix high severity security issue in docs/concepts/dom.mdx.

Vulnerability

Field	Value
ID	V-001
Severity	HIGH
Scanner	multi_agent_ai
Rule	V-001
File	docs/concepts/dom.mdx:1350

Description: The DOM manipulation documentation at docs/concepts/dom.mdx:1350 explicitly demonstrates unsanitized user input being inserted into the DOM, using the example payload ''. The example shows the dangerous pattern of direct DOM insertion without sanitization and without adequate in-context guidance on the safe alternative. If the documentation site renders interactive or executable code examples (e.g., via a live code playground or embedded REPL), an attacker could supply malicious HTML/JavaScript through the getUserInput() function. Even without a live playground, the example as written teaches developers an insecure pattern that may be replicated in production applications.

Changes

• docs/concepts/dom.mdx

Verification

• Build passes
• Scanner re-scan confirms fix
• LLM code review passed

---

Automated security fix by OrbisAI Security