Function escapeHtml

escapeHtml(str: string | null | undefined): string
Escape dangerous HTML characters to prevent XSS.
Parameters
- str: string | null | undefined
  The string to escape. Null or undefined returns "".
Returns string
The HTML-escaped string, safe for use in DOM text contexts.

Security
Sanitizes arbitrary strings against HTML injection by escaping <, >, &, ", ' to entities.
- Defined in src/kernel/security/escaping.ts:31