don't inject html code in preset names

modules/ui/preset_list.js

@@ -329,7 +329,8 @@ export function uiPresetList(context) {
                 .attr('class', 'namepart')
                 .call(svgIcon((localizer.textDirection() === 'rtl' ? '#iD-icon-backward' : '#iD-icon-forward'), 'inline'))
                 .append('span')
-                .html(function() { return preset.nameLabel() + '…'; });
+                .call(preset.nameLabel())
+                .append('span').text('…');
 
             box = selection.append('div')
                 .attr('class', 'subgrid')
@@ -402,7 +403,7 @@ export function uiPresetList(context) {
                 .enter()
                 .append('div')
                 .attr('class', 'namepart')
-                .html(function(d) { return d; });
+                .each(function(d) { d(d3_select(this)); });
 
             wrap.call(item.reference.button);
             selection.call(item.reference.body);

modules/ui/sections/feature_type.js

@@ -1,4 +1,5 @@
 import { dispatch as d3_dispatch } from 'd3-dispatch';
+import { select as d3_select } from 'd3-selection';
 
 import { presetManager } from '../../presets';
 import { utilArrayIdentical } from '../../util/array';
@@ -108,7 +109,7 @@ export function uiSectionFeatureType(context) {
             .enter()
             .append('div')
             .attr('class', 'namepart')
-            .html(function(d) { return d; });
+            .each(function(d) { return d(d3_select(this)); });
     }
 
     section.entityIDs = function(val) {