Show a posted news item as text in the other sessions of the AMC sample

Z2UI5_CL_SMPS_APP_489 put the text that arrives over the channel straight
into a FeedListItem, which renders its text as FormattedText - so markup
one user typed (a link, bold, a list) reached every other open session as
markup. The text is now HTML-escaped on the way into the feed, the way
Z2UI5_CL_SMPS_APP_014 already does it for its chat.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Te3BRpRpxNhZAYnrQL6Gdt

Author: claude

src/07/z2ui5_cl_smps_app_489.clas.abap

@@ -52,6 +52,14 @@ CLASS z2ui5_cl_smps_app_489 DEFINITION PUBLIC.
       RETURNING
         VALUE(result) TYPE string.
 
+    "! the three characters FormattedText reads as markup - escaped, so a
+    "! news item somebody else posted shows the text they typed
+    METHODS html_escape
+      IMPORTING
+        val           TYPE string
+      RETURNING
+        VALUE(result) TYPE string.
+
 ENDCLASS.
 
 
@@ -148,9 +156,12 @@ CLASS z2ui5_cl_smps_app_489 IMPLEMENTATION.
           RETURN.
         ENDIF.
 
+        " a FeedListItem renders its text as FormattedText, and this text
+        " was typed by whoever is on the channel - escaped, so a posted <a>
+        " or <strong> reaches the other sessions as the text it is
         INSERT VALUE ty_s_news(
-            text   = json_get_string( json = ws_message
-                                      name = `text` )
+            text   = html_escape( json_get_string( json = ws_message
+                                                   name = `text` ) )
             author = json_get_string( json = ws_message
                                       name = `author` ) ) INTO TABLE t_news.
 
@@ -194,6 +205,16 @@ CLASS z2ui5_cl_smps_app_489 IMPLEMENTATION.
   ENDMETHOD.
 
 
+  METHOD html_escape.
+
+    " the ampersand FIRST, or the other two would be escaped twice
+    result = replace( val = val    sub = `&` with = `&amp;` occ = 0 ).
+    result = replace( val = result sub = `<` with = `&lt;`  occ = 0 ).
+    result = replace( val = result sub = `>` with = `&gt;`  occ = 0 ).
+
+  ENDMETHOD.
+
+
   METHOD json_get_string.
 
     " Reads one string field of the flat object json_build( ) writes. Finding