Bump Sanitize-html to 1.22.1 and remove unneeded patch

[Jskobos]

Description

Basically redoing #6143 with up-to-date lockfile etc.

Note to reviewers

Make sure that the old CSS injection attacks etc. don't work still and that HTML is escaped as expected in Support tickets.

I fixed the tests, but I'm not crazy about a lot of the ones that are still passing. We're making very specific assertions about string output, which could change any time this library releases a patch. We're also essentially unit testing an external library, which I understand the point since this is security related but I still think is unnecessary.

[acourdavault]

This looks good to me,
Although I d like to have @johnwcallahan s review on the CSS injection as I am unsure if this decreases the security of this or not.

[johnwcallahan]

Works well. I agree with your assessment that the tests aren't very useful here. I think a few basic sanity tests are appropriate, but testing these specific strings is probably unnecessary. I can put together a follow-on PR if you like.

[acourdavault]

lgtm

[Jskobos]

Works well. I agree with your assessment that the tests aren't very useful here. I think a few basic sanity tests are appropriate, but testing these specific strings is probably unnecessary. I can put together a follow-on PR if you like.

@johnwcallahan if you don't mind that would be great. I tried a few expect(cleaned).not.toContain(<script>) things earlier but didn't come up with anything that I thought was useful