Potential fix for code scanning alert no. 12: Incomplete multi-character sanitization

[meraedit]

Potential fix for https://github.com/Servoy/servoy-eclipse/security/code-scanning/12

To fix this safely without changing intended functionality, make script-stripping iterative until stable (fixed point), instead of a single pass. This directly addresses incomplete multi-character sanitization: if one removal pass reveals another match, subsequent passes remove it as well.

Best approach in this file:

• In ngOnInit around the current line 40 logic, replace the one-time safeHtml.replace(externalScriptRegex, '') with a do...while loop that keeps applying the same global regex until no changes occur.
• Keep existing behavior otherwise:
  • still process placeholders,
  • still remove external scripts from bound HTML,
  • still re-inject extracted external scripts with nonce from processedHtml.

No new imports or dependencies are needed.

Suggested fixes powered by Copilot Autofix. Review carefully before merging.