The DOM scanner colors sources and sinks in script lines. Moreover,
that scanner collects all colored lines:
0ecedc1bba/core/dom.py (L50)
As coloring is disabled on Windows, macOS, and iOS, no potentially
tainted lines will be collected on these platforms:
0ecedc1bba/core/colors.py (L8-L9)
Consequently, the report of potential DOM vulnerabilities is always
empty.
This change fixes this bug by surrounding sources and sinks with `*`
characters.
Also, this change removes unused colors imports.