[Audit] Output of text values, when not escaped, can break the UI

[nicklepine]

Purpose

We need to check all the places where a merchant can type into a text field and ensure it's properly escaped.

If they toss </div> into one of these, it can break the UI:

[willbroderick]

I'm not sure if this should be a separate issue, but this needs to include filters.
For example: https://github.com/Shopify/dawn/blob/main/sections/main-collection-product-grid.liquid#L56

With a variant filter value of 6", you see: