comnuoc

Currently, the [script](https://github.com/symfony/ux/blob/2.x/src/Autocomplete/assets/src/controller.ts#L241) does not escape remote data and may have XSS vulnerabilities. ```javascript render: { option: function (item: any) { return `${item.text}`; }, item: function (item: any) { return...