We were only escaping the first instance of any invalid dom char and not all of the
Node-RED editor resources module.
This provides all of the client-side resources of the Node-RED editor application.
The main Node-RED modules are maintained as a monorepo on GitHub.