GitHub Copilot code security: XSS in React