chore: remove antixss extension and rely on proper input escaping

src/Twig/AppRuntime.php

@@ -167,9 +167,9 @@ class AppRuntime implements RuntimeExtensionInterface
 
         $list = '<ul class="'.$class.'">';
         foreach ($items as $item) {
-            $list .= '<li>'.$item.'</li>';
+            $list .= '<li>'.htmlspecialchars($item, ENT_QUOTES | ENT_SUBSTITUTE, 'UTF-8').'</li>';
         }
-        $list .= '<ul>';
+        $list .= '</ul>';
 
         return $list;
     }