fix: escape HTML in exported data - #40923

Conclusion: failure

Steps

• ✅ No merge conflicts
• ❌ QA assured — This PR is missing the 'stat: QA assured' label
• ✅ Mergeable
• ✅ Has milestone or project
• ✅ Valid PR title
• ✅ Correct target version