Fix code scanning alert no. 13: Unsafe jQuery plugin

[km719]

Fixes https://github.com/GSA/CFO.gov/security/code-scanning/13

To fix the problem, we need to ensure that the markup variable is sanitized before it is used to create a jQuery object. This can be achieved by using a method that treats the input as a CSS selector rather than HTML, thereby preventing the execution of any potentially malicious scripts. Specifically, we can use jQuery.parseHTML to safely parse the markup string and ensure it does not contain any executable scripts.

1. Identify the line where the markup variable is assigned (line 509).
2. Replace the direct assignment of markup to $(markup) with a sanitized version using jQuery.parseHTML.
3. Ensure that the parsed HTML is safely appended to the DOM.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.