fix: Escaping range and values summarizer state (#19502)

Author: danharrin

packages/tables/src/Columns/Summarizers/Range.php

@@ -155,11 +155,11 @@ public function toEmbeddedHtml(): string
 
             <?php if (filled($from) || filled($to)) { ?>
                 <span>
-                    <?= $from ?>
+                    <?= e($from) ?>
 
                     <?= (filled($from) && filled($to)) ? '-' : '' ?>
 
-                    <?= $to ?>
+                    <?= e($to) ?>
                 </span>
             <?php } ?>
         </div>

packages/tables/src/Columns/Summarizers/Values.php

@@ -47,7 +47,7 @@ public function toEmbeddedHtml(): string
                 <ul <?= $this->isBulleted() ? 'class="fi-bulleted"' : '' ?>>
                     <?php foreach ($state as $stateItem) { ?>
                         <li>
-                            <?= $this->formatState($stateItem) ?>
+                            <?= e($this->formatState($stateItem)) ?>
                         </li>
                     <?php } ?>
                 </ul>