Force all columns in any declared datatable to render using datatables render.text function to prevent possible (very low risk, requiring authenticated dashboard anyway) XSS.

Signed-off-by: Adam Warner <me@adamwarner.co.uk>

scripts/pi-hole/js/messages.js

@@ -114,6 +114,12 @@ $(function () {
       { data: "blob5", visible: false },
       { data: null, width: "80px", orderable: false },
     ],
+    columnDefs: [
+      {
+        targets: "_all",
+        render: $.fn.dataTable.render.text(),
+      },
+    ],
     drawCallback: function () {
       $('button[id^="deleteMessage_"]').on("click", deleteMessage);
       // Remove visible dropdown to prevent orphaning