security: Rewrite x-html to x-text because of CSP

Author: jissereitsma

view/adminhtml/templates/form/field_type/entity_select.phtml

@@ -63,7 +63,7 @@ $fieldId = $field->getDomId();
             :value="<?= $escaper->escapeHtml($valueCode) ?>"
             @change="<?= $escaper->escapeHtml($field->getAlpineSetter()) ?>"
         >
-            <span style="float: right; color: #777; font-size: 80%;" x-html="previewValue"></span>
+            <span style="float: right; color: #777; font-size: 80%;" x-text="previewValue"></span>
         </span>
 
         <button @click="showModalWrapper"><?= $escaper->escapeHtml(__($buttonLabel)) ?></button>
@@ -136,7 +136,7 @@ $fieldId = $field->getDomId();
                                 </td>
                                 <?php foreach ($columns as $column) : ?>
                                     <td class="data-grid-cell">
-                                        <div class="data-grid-cell-content" x-html="entity.<?= $escaper->escapeHtml($column->getCode()) ?>"></div>
+                                        <div class="data-grid-cell-content" x-text="entity.<?= $escaper->escapeHtml($column->getCode()) ?>"></div>
                                     </td>
                                 <?php endforeach; ?>
                             </tr>

view/adminhtml/templates/form/field_type/view.phtml

@@ -19,4 +19,4 @@ $field = $block->getField();
 $fieldType = $field->getFieldType();
 
 ?>
-<div style="padding-top:8px;" x-html="<?= $escaper->escapeHtml($field->getScope()) ?>.<?= $escaper->escapeHtml($field->getCode()) ?>"></div>
+<div style="padding-top:8px;" x-text="<?= $escaper->escapeHtml($field->getScope()) ?>.<?= $escaper->escapeHtml($field->getCode()) ?>"></div>

view/adminhtml/templates/grid/pager/pagination.phtml

@@ -30,7 +30,7 @@ $page = $viewModel->getPage();
         id="current_page"/>
 
     <label class="admin__control-support-text" for="current_page">
-        of <span x-html="totalPages"></span> pages
+        of <span x-text="totalPages"></span> pages
     </label>
 
     <button

view/adminhtml/templates/grid/records.phtml

@@ -10,9 +10,9 @@ use Magento\Framework\View\Element\Template;
 /** @var Template $block */
 ?>
 <div class="admin__control-support-text">
-    <span x-html="totalItems"></span> <?= $escaper->escapeHtml(__('records found')) ?>
+    <span x-text="totalItems"></span> <?= $escaper->escapeHtml(__('records found')) ?>
 
     <span x-cloak x-show="getSelectedIdCount">
-        (<span x-html="getSelectedIdCount"></span> selected)
+        (<span x-text="getSelectedIdCount"></span> selected)
     </span>
 </div>