// Small shared helpers.

const ESCAPE_MAP: Record<string, string> = {
  '&': '&amp;',
  '<': '&lt;',
  '>': '&gt;',
  '"': '&quot;',
  "'": '&#39;',
};

export function escapeHtml(str: string): string {
  return String(str).replace(/[&<>"']/g, (c) => ESCAPE_MAP[c] ?? c);
}