Escape HTML in description

Co-authored-by: Keith Cirkel <[email protected]>

Author: koddsson

README.md

@@ -1,6 +1,6 @@
 # <details-dialog> element
 
-A modal dialog opened with a <details> button.
+A modal dialog opened with a &lt;details&gt; button.
 
 ## Installation
   Available on [npm](https://www.npmjs.com/) as [**@github/details-dialog-element**](https://www.npmjs.com/package/@github/details-dialog-element).

cem-plugin-readme.js

@@ -43,6 +43,10 @@ Include with a script tag:
 \`\`\``
 }
 
+const escapeHTML = (html) => {
+    return html.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;').replaceAll('"', '&quot;').replaceAll("'", '&#039;');
+}
+
 export function readme(options) {
   const {filename = 'README.md', exclude = [], title, preamble, footer} = options ?? {}
 
@@ -53,7 +57,7 @@ export function readme(options) {
     async packageLinkPhase({customElementsManifest}) {
       const content = [
         `# ${title || generateTitle({packageJson})}`,
-        packageJson.description,
+        escapeHTML(packageJson.description),
         preamble,
         generateInstallationInstructions({packageJson}),
         `## Usage`,