code: function sanitizeInput(rawInput) {
     var placeholder = HtmlService.createHtmlOutput(" ");
     placeholder.appendUntrusted(rawInput);
    
     return placeholder.getContent();
   }
docs: sanitize content from the user - trust no one ref: https://developers.google.com/apps-script/reference/html/html-output#appendUntrusted(String)