This commit addresses several XSS vulnerabilities by ensuring that
dynamic data from external APIs (GitHub) and error messages are
properly escaped before being rendered via innerHTML.
Affected areas:
- openVersionMenu error handling and version list
- showErrorModal title and button text
- showToast message content
All changes were verified with a reproduction test case.
Co-authored-by: TauNeutrino <1600410+TauNeutrino@users.noreply.github.com>
