Fix Codacy XSS warnings and CSS template compatibility

Author: sdarwin

gcovr-templates/html/gcovr.js

@@ -1577,7 +1577,7 @@
             a.className = el.className.replace(/\bdisabled\b/, '').trim();
             a.href = href;
             a.title = el.title;
-            a.innerHTML = el.innerHTML;
+            while (el.firstChild) a.appendChild(el.firstChild.cloneNode(true));
             el.parentNode.replaceChild(a, el);
           }
         } else {
@@ -1586,7 +1586,7 @@
             var span = document.createElement('span');
             span.className = el.className + ' disabled';
             span.title = el.title;
-            span.innerHTML = el.innerHTML;
+            while (el.firstChild) span.appendChild(el.firstChild.cloneNode(true));
             el.parentNode.replaceChild(span, el);
           } else {
             el.classList.add('disabled');

gcovr-templates/html/style.css

@@ -1119,7 +1119,7 @@ body.sidebar-resizing .main-content {
 
 .file-list-header {
   display: grid;
-  grid-template-columns: minmax(200px, 2fr) minmax(150px, 1fr) 100px 100px 100px{% if SHOW_CONDITION_COVERAGE %} 100px{% endif %}{% if SHOW_DECISION %} 100px{% endif %}{% if SHOW_CALLS %} 100px{% endif %}{% if info.diff_report %} 95px{% endif %};
+  grid-template-columns: minmax(200px, 2fr) minmax(150px, 1fr) 100px 100px 100px{% if SHOW_CONDITION_COVERAGE %} 100px{% endif %}{% if SHOW_DECISION %} 100px{% endif %}{% if SHOW_CALLS %} 100px{% endif %}{% if info is defined and info.diff_report %} 95px{% endif %};
   gap: 8px;
   padding: 12px 16px;
   background: var(--bg-tertiary);
@@ -1156,7 +1156,7 @@ body.sidebar-resizing .main-content {
 
 .file-row {
   display: grid;
-  grid-template-columns: minmax(200px, 2fr) minmax(150px, 1fr) 100px 100px 100px{% if SHOW_CONDITION_COVERAGE %} 100px{% endif %}{% if SHOW_DECISION %} 100px{% endif %}{% if SHOW_CALLS %} 100px{% endif %}{% if info.diff_report %} 95px{% endif %};
+  grid-template-columns: minmax(200px, 2fr) minmax(150px, 1fr) 100px 100px 100px{% if SHOW_CONDITION_COVERAGE %} 100px{% endif %}{% if SHOW_DECISION %} 100px{% endif %}{% if SHOW_CALLS %} 100px{% endif %}{% if info is defined and info.diff_report %} 95px{% endif %};
   gap: 8px;
   padding: 4px 16px;
   border-bottom: 1px solid var(--border-muted);