Function html_escape 

pub fn html_escape(s: &str) -> String

Escape a string for safe HTML output inside a LiveComponent’s render().

fn render(&self) -> String {
    format!("<span>{}</span>", html_escape(&self.user_input))
}