security: encrypt NaCl keypair at rest with AES-GCM and harden PoW captcha signature with HMAC-SHA256

js/components/pages/page-listing.js

@@ -635,11 +635,7 @@ class PageListing extends HTMLElement {
 
     formatDescription(text) {
         if (!text) return ''
-        return text
-            .replace(/&/g, '&')
-            .replace(/</g, '&lt;')
-            .replace(/>/g, '&gt;')
-            .replace(/\n/g, '<br>')
+        return escapeHTML(text).replace(/\n/g, '<br>')
     }
 }