fix: escape ip blacklist rules

src/controllers/globalmods.js

@@ -1,5 +1,7 @@
 'use strict';
 
+const validator = require('validator');
+
 const user = require('../user');
 const meta = require('../meta');
 const analytics = require('../analytics');
@@ -20,7 +22,7 @@ globalModsController.ipBlacklist = async function (req, res, next) {
 	]);
 	res.render('ip-blacklist', {
 		title: '[[pages:ip-blacklist]]',
-		rules: rules,
+		rules: validator.escape(String(rules)),
 		analytics: analyticsData,
 		breadcrumbs: helpers.buildBreadcrumbs([{ text: '[[pages:ip-blacklist]]' }]),
 	});