fix: address coderabbit safety suggestions (use escapejs)

Author: ycanales

templates/v3/includes/_field_combo.html

@@ -21,7 +21,7 @@
        jsReady: false,
        open: false,
        query: '',
-       selected: '{{ selected|default:'' }}',
+       selected: '{{ selected|default:''|escapejs }}',
        selectedLabel: '',
        options: [],
        activeIndex: -1,
@@ -35,7 +35,7 @@
          this.jsReady = true;
          this.options = JSON.parse(document.getElementById('field-{{ name }}-options').textContent);
          if (this.selected) {
-           const match = this.options.find(o => o.value === this.selected);
+           const match = this.options.find(o => String(o.value) === String(this.selected));
            if (match) this.selectedLabel = match.label;
          }
        },
@@ -130,9 +130,9 @@
         <template x-for="option in filtered" :key="option.value">
           <div class="dropdown__item"
                :id="'field-{{ name }}-option-' + option.value"
-               :class="{ 'dropdown__item--selected': selected === option.value, 'dropdown__item--active': activeValue === option.value }"
+               :class="{ 'dropdown__item--selected': String(selected) === String(option.value), 'dropdown__item--active': activeValue === option.value }"
                role="option"
-               :aria-selected="selected === option.value"
+               :aria-selected="String(selected) === String(option.value)"
                @click="choose(option.value, option.label)"
                @keydown.enter.prevent="choose(option.value, option.label)"
                @keydown.space.prevent="choose(option.value, option.label)"