XSS Issue - HTML escaping not preserved when building dropdown version of breadcrumbs.

[xurble]

Checklist

• I'm using version [0.2.3]
• My browser is: Safari 14.0.3 (affects all though)
• This is a Sass issue: I'm using version [x.x.x]
• I am sure this issue is not a duplicate?

Description

There is a possible XSS issue when building the dropdown. Escaped HTML from the breadcrumbs item is re-inserted in the dropdown version as text.

How can we reproduce this bug?

Uses this HTML as your breadcrumbs

<ol class="breadcrumb app-breadcrumb breadcrumb-left">
  <li class="breadcrumb-item"><a href="/"><i class="fas fa-home"></i></a></li>
  <li class="breadcrumb-item">&lt;script&gt;alert('xss')&lt;/script&gt;</li>
</ol>

What did you expect to happen?

Escaped HTML should remain escaped

What happened instead?

script tags was executed.