[GHSA] GHSA-m7fp-h3p4-hr49 (high) — LiquidJS has an infinite loop vulnerability in its `strip_html` filter

GHSA-m7fp-h3p4-hr49 Severity: high CVE: CVE-2026-61556

LiquidJS has an infinite loop vulnerability in its `strip_html` filter

### Summary The current implementation of `strip_html` can cause an infinite loop when the input string contains `<`, has at least one character before `<`, and no `>` appears after `<`.

### Details The problem is in `src/filters/html.ts`. Specifically, the following par