fix: html escaping for console page

Author: bajrangCoder

package-lock.json

@@ -119,4 +119,4 @@
     "yargs": "^17.7.2"
   },
   "browserslist": "cover 100%,not android < 5"
-}
+}

package.json

@@ -468,7 +468,7 @@ import loadPolyFill from "utils/polyfill";
 						);
 						break;
 					default:
-						$msg.innerHTML = arg;
+						$msg.textContent = arg;
 						break;
 				}
 			}
@@ -494,7 +494,7 @@ import loadPolyFill from "utils/polyfill";
 	 * @returns
 	 */
 	function format(args) {
-		if (args.length <= 1) return [escapeHTML(args[0])];
+		if (args.length <= 1) return [args[0]];
 
 		const originalArgs = [].concat(args);
 		const styles = [];
@@ -548,8 +548,10 @@ import loadPolyFill from "utils/polyfill";
 						break;
 				}
 			}
-			msg = msg.substring(0, pos) + escapeHTML(value) + msg.substring(pos + 2);
-			matched = matchRegex(msg);
+			// Only escape HTML for the %o/%O case where we're injecting actual HTML
+        const escapedValue = specifier === "%o" || specifier === "%O" ? value : escapeHTML(value);
+        msg = msg.substring(0, pos) + escapedValue + msg.substring(pos + 2);
+        matched = matchRegex(msg);
 		}
 
 		if (styles.length) {