test(svg): escapes script injection characters in escapeXML (JhaSourav07#1593)

## Description

Fixes JhaSourav07#1578

## Pillar
- [x] 🛠️ Other (Bug fix, refactoring, docs)

## Visual Preview
No visual changes — this is a test-only PR.

## Checklist before requesting a review:
- [x] I have read the `CONTRIBUTING.md` file.
- [x] I have tested these changes locally.
- [x] I have run `npm run format` and `npm run lint` locally and
resolved all errors.
- [x] My commits follow the Conventional Commits format.
- [x] I have made sure that i have only one commit to merge in this PR.
- [x] I have starred the repo.

Author: JhaSourav07

lib/svg/generator.test.ts

@@ -1109,6 +1109,9 @@ describe('escapeXML', () => {
     const safe = 'Hello World 123!@#%^*()_+-=[]{}|;:,./?`~';
     expect(escapeXML(safe)).toBe(safe);
   });
+  it('escapes script injection characters <script>&" together', () => {
+    expect(escapeXML('<script>&"')).toBe('&lt;script&gt;&amp;&quot;');
+  });
 });
 
 describe('particleCount', () => {