scinote-web/app/javascript/vue/shared/escape_html.js

export default (unsafe) => unsafe
  .replaceAll('&', '&')
  .replaceAll('<', '&lt;')
  .replaceAll('>', '&gt;')
  .replaceAll('"', '&quot;')
  .replaceAll("'", '&#039;');