Fix code scanning alert no. 1: Incomplete string escaping or encoding

[btylerburton]

Fixes https://github.com/GSA/data-strategy/security/code-scanning/1

To fix the problem, we need to ensure that backslashes in the id variable are properly escaped before it is used in the query selector. This can be done by modifying the id.replace method to also escape backslashes. We will use a regular expression with the global flag to replace all occurrences of backslashes and double quotes.

• Modify the id.replace method on line 1212 to escape both backslashes and double quotes.
• Ensure that the regular expression used in the replace method includes the global flag to replace all occurrences.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.

[btylerburton]

Hat tip to Github Copilot for this one. @FuhuXia I think we can leave off updating USWDS for now since this fixed the vulnerability.

[btylerburton]

Related to:

• https://github.com/GSA/data.gov/issues/4906