ci(style): Add escaping of template code

Author: jissereitsma

view/frontend/templates/component/debugger.phtml

@@ -24,19 +24,19 @@ $htmlId = $idConvertor->toElementId($block->getNameInLayout());
 <div class="<?= $escaper->escapeHtml($css('')) ?>">
     <button class="fixed bottom-0 right-0 bg-orange-500 text-white p-4 z-20" @click="toggleVisibility">
         <span role="tab">
-            <?= __('Loki Debugger') ?>
+            <?= $escaper->escapeHtml(__('Loki Debugger')) ?>
         </span>
     </button>
 
     <div x-show="visible" x-cloak class="<?= $escaper->escapeHtml($css('fixed bottom-0 left-0 right-0 h-64 md:block w-full border-t border-orange-500 bg-orange-50', 'tabs')) ?>" x-ref="toolbar">
         <div class="absolute top-0 left-0 right-0" style="height:10px; cursor: ns-resize" x-ref="resizer"></div>
 
         <div class="<?= $escaper->escapeHtml($css('flex items-stretch overflow-x-auto px-2 pt-2 bg-orange-500', 'td')) ?>" role="tablist">
-            <?= $childRenderer->all($block, 'loki-debugger.debugger.tab-button.') ?>
+            <?= $escaper->escapeHtml($childRenderer->all($block, 'loki-debugger.debugger.tab-button.')) ?>
         </div>
 
         <div style="height:100%;overflow:scroll">
-            <?= $childRenderer->all($block, 'loki-debugger.debugger.tab.') ?>
+            <?= $escaper->escapeHtml($childRenderer->all($block, 'loki-debugger.debugger.tab.')) ?>
         </div>
     </div>
 </div>

view/frontend/templates/component/debugger/tab-button/generic.phtml

@@ -17,11 +17,11 @@ $tabLabel = $block->getTabLabel();
 <div>
     <button
         role="tab"
-        aria-controls="tab-<?= $tabName ?>"
-        data-tab-name="<?= $tabName ?>"
+        aria-controls="tab-<?= $escaper->escapeHtml($tabName) ?>"
+        data-tab-name="<?= $escaper->escapeHtml($tabName) ?>"
         type="button"
         @click.prevent="switchTab"
         :class="buttonCssClass">
-        <?= __($tabLabel) ?>
+        <?= $escaper->escapeHtml(__($tabLabel)) ?>
     </button>
 </div>

view/frontend/templates/component/debugger/tab/server-dump.phtml

@@ -17,7 +17,7 @@ $viewModel = $block->getAncestorBlock()->getViewModel();
 ?>
 <div :class="tabCssClass" class="<?= $escaper->escapeHtml($css('p-4')) ?>" data-tab-name="server-dump" id="tab-server-dump">
     <h3 class="<?= $escaper->escapeHtml($css('text-xl my-4', 'tab-heading')) ?>">
-        <?= __('Server Dump') ?>
+        <?= $escaper->escapeHtml(__('Server Dump')) ?>
     </h3>
     <pre><?php var_dump($viewModel->getData()) ?></pre>
 </div>