fix: codeql alerts

Author: sharevb

package.json

@@ -203,6 +203,7 @@
     "pythonstack.js": "^1.0.2",
     "qpdf-wasm-esm-embedded": "^1.1.1",
     "qrcode": "^1.5.1",
+    "sanitize-html": "^2.13.1",
     "qrcode-parser": "^2.1.3",
     "qrcode-terminal-nooctal": "^0.12.1",
     "randexp": "^0.5.3",
@@ -283,6 +284,7 @@
     "@types/potrace": "^2.1.5",
     "@types/punycode": "^2.1.4",
     "@types/qrcode": "^1.5.0",
+    "@types/sanitize-html": "^2.13.0",
     "@types/stringify-object": "^4.0.5",
     "@types/spdx-satisfies": "^0.1.2",
     "@types/sshpk": "^1.17.4",