1faab61098
buy_page.rs kept a private html_escape that omitted the `'` escape the canonical api::mod.rs impl has, so operator/product/discount-code text rendered into HTML attributes was under-escaped. Drop the fork, reuse the canonical escaper, and add a unit test covering the single quote.