/** * Common utilities. */ /** * Escape string for safe use in HTML (text content / attributes). * @param {string} s - Raw string * @returns {string} HTML-escaped string */ export function escapeHtml(s) { const div = document.createElement("div"); div.textContent = s; return div.innerHTML; }