A Formal Model of the Safely Composable Document Object Model with Shadow Roots by Achim D. Brucker and Michael Herzberg Sep 28