Inject raw HTML with `{@html ...}`; sanitize input to prevent XSS; injected HTML bypasses scoped styles, use `:global` to style it.