Function sanitizeHtml

Sanitizes a user-provided string against XSS injection. Escapes HTML special characters so the string is safe to display as text content.