Fix code scanning alert - Client-side cross-site scripting

[austenstone]

Tracking issue for:

• https://github.com/octodemo/vulnerable-node/security/code-scanning/3