Fix xss vulnerability in the seo component

[blittle]

WHY are these changes introduced?

Fix XSS vulnerability

WHAT is this pull request doing?

React escapes all content within a script component. For JSON/LD, the script content cannot be escaped, so we have to use dangerouslySetInnerHTML. But instead this change introduces a 3p dependency sanitize-html to sanitize the values within the JSON/LD object. This change adds 63kb to the worker bundle.

HOW to test your changes?

See internal discussion.

Post-merge steps

Checklist

• I've read the Contributing Guidelines
• I've considered possible cross-platform impacts (Mac, Linux, Windows)
• I've added a changeset if this PR contains user-facing or noteworthy changes
• I've added tests to cover my changes
• I've added or updated the documentation

[shopify]

Oxygen deployed a preview of your bl-fix-xss branch. Details:

Storefront	Status	Preview link	Deployment details	Last update (UTC)
optimistic-cart-ui	⏳ In progress (Logs)	-	Inspect deployment	March 12, 2024 6:13 PM
skeleton	⏳ In progress (Logs)	-	Inspect deployment	March 12, 2024 6:13 PM
vite	✅ Successful (Logs)	Preview deployment	Inspect deployment	March 12, 2024 5:59 PM
subscriptions	⏳ In progress (Logs)	-	Inspect deployment	March 12, 2024 6:13 PM
custom-cart-method	⏳ In progress (Logs)	-	Inspect deployment	March 12, 2024 6:13 PM
third-party-queries-caching	⏳ In progress (Logs)	-	Inspect deployment	March 12, 2024 6:13 PM

Learn more about Hydrogen's GitHub integration.