validate settings

[github-actions[bot]]

https://api.github.com/lafkpages/XL-Replit/blob/3a05cd745096843d49f71b2a0cba70fd1ac5f3df/src/inject.ts#L28

// Get XL settings
const rawSettings = document.currentScript.dataset.settings;
const settings = rawSettings
  ? (() => {
      try {
        return JSON.parse(rawSettings);

        // TODO: validate settings
      } catch {
        return {};
      }
    })()
  : {};
delete document.currentScript.dataset.settings;
module.exports.settings = settings;