Potential fix for code scanning alert no. 1: DOM text reinterpreted as HTML

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

Author: margaretha

SIS/clarin/resources/scripts/edit.js

@@ -7,6 +7,15 @@ if (typeof String.prototype.startsWith != 'function') {
     };
 }
 
+function escapeHtml(unsafe) {
+    return unsafe
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#039;");
+}
+
 function showResp(resptype,resporg,respname){
 	e = document.getElementById(resptype);
 	if (e.options[e.selectedIndex].value == 'person'){
@@ -443,7 +452,7 @@ function addDesc(specid,parentid,pids){
 
         s = document.createElement("span")
         s.id="desc"+newpid+"text"
-        s.appendChild(document.createTextNode(text)) // New description text        
+        s.appendChild(document.createTextNode(escapeHtml(text))) // New description text        
         // Dummy strings to allocate different element variables
         b1 = createButton("b1","edit","Edit","edit",newpid,specid,pids) // New edit button    
         b2 = createButton("b2","edit","Add","add",newpid,specid,pids) // New add button