Test/escape xml variation (JhaSourav07#1651)

## Description
test(utils): check boundary robustness of escapeXML helper (Variation 3)

Fixes  JhaSourav07#1568

## Pillar

- [ ] 🎨 Pillar 1 — New Theme Design
- [ ] 📐 Pillar 2 — Geometric SVG Improvement
- [ ] 🕐 Pillar 3 — Timezone Logic Optimization
- [x] 🛠️ Other (Bug fix, refactoring, docs)

## Visual Preview

## Checklist before requesting a review:

- [x] I have read the `CONTRIBUTING.md` file.
- [x] I have tested these changes locally
(`localhost:3000/api/streak?user=YOUR_USERNAME`).
- [x] I have run `npm run format` and `npm run lint` locally and
resolved all errors (CI will fail otherwise).
- [x] My commits follow the Conventional Commits format (e.g.,
`feat(themes): ...`, `fix(calculate): ...`).
- [ ] I have updated `README.md` if I added a new theme or URL
parameter.
- [x] I have started the repo.
- [x] I have made sure that i have only one commit to merge in this PR.
- [x] The SVG output matches the CommitPulse "premium quality" aesthetic
standard (no raw elements, smooth animations, correct fonts).
- [x] (Recommended) I joined the CommitPulse Discord community for
contributor discussions, mentorship, and faster PR support.

Author: Omnisslayer01

app/api/wrapped/route.ts

@@ -10,13 +10,6 @@ import { themes } from '@/lib/svg/themes';
 const SVG_CSP_HEADER =
   "default-src 'none'; style-src 'unsafe-inline' https://fonts.googleapis.com; font-src https://fonts.gstatic.com; connect-src https://fonts.gstatic.com;";
 
-class ValidationError extends Error {
-  constructor(message: string) {
-    super(message);
-    this.name = 'ValidationError';
-  }
-}
-
 function escapeSVGText(value: string): string {
   return value.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
 }

app/customize/components/ThemeQuickPresets.test.tsx

@@ -2,7 +2,6 @@ import { describe, it, expect, vi, beforeEach } from 'vitest';
 import { fireEvent, render, screen } from '@testing-library/react';
 import { ThemeQuickPresets } from './ThemeQuickPresets';
 import { THEME_KEYS } from '../types';
-import { themes } from '../../../lib/svg/themes';
 
 const validKeys = THEME_KEYS.filter((k) => k !== 'auto' && k !== 'random');
 

lib/svg/generator.test.ts

@@ -1304,6 +1304,38 @@ describe('Radar Scan Line Animation Alignment', () => {
     expect(result).not.toEqual(longUsername);
   });
 
+  it('should cleanly convert exact boundary characters (<script>&") to safe XML entities', () => {
+    // Arrange: The specific boundary string requested in Issue #1568
+    const boundaryInput = '<script>&"';
+
+    // Act
+    const result = escapeXML(boundaryInput);
+
+    // Assert:
+    // <  becomes &lt;
+    // >  becomes &gt;
+    // &  becomes &amp;
+    // "  becomes &quot;
+    expect(result).toBe('&lt;script&gt;&amp;&quot;');
+  });
+
+  it('should handle mixed real-world inputs correctly without double-escaping', () => {
+    // Arrange: A realistic edge case for a GitHub user profile
+    const mixedInput = 'R&D <"Team">';
+
+    // Act
+    const result = escapeXML(mixedInput);
+
+    // Assert
+    expect(result).toBe('R&amp;D &lt;&quot;Team&quot;&gt;');
+  });
+
+  it('should handle empty and safe inputs gracefully', () => {
+    // Assert: Empty inputs and regular strings remain untouched
+    expect(escapeXML('')).toBe('');
+    expect(escapeXML('CommitPulse')).toBe('CommitPulse');
+  });
+
   it('renders long usernames as truncated SVG labels without breaking geometry', () => {
     const longUsername = 'ThisIsAVeryLongUsernameThatExceedsThirtyCharacters';
     const svg = generateSVG(