const escapeDiv = document.createElement("div"); /** * @param text Potentially dangerous text * @returns Text safe to embed in HTML **/ export function escapeHtml(text: string): string { escapeDiv.textContent = text; return escapeDiv.innerHTML; }