Fix code scanning alert no. 21: DOM text reinterpreted as HTML

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Signed-off-by: Dr. Hans-Peter Störr <[email protected]>

aem/ui.apps/src/main/content/jcr_root/apps/composum-ai/components/tool/comparetool/comparetool.html

@@ -60,12 +60,22 @@
     // Event listeners for URL input fields
     leftField.addEventListener('change', function () {
         leftLoaded = false;
-        leftIframe.src = this.value;
+        try {
+            const url = new URL(this.value);
+            leftIframe.src = url.href;
+        } catch (e) {
+            console.error('Invalid URL:', this.value);
+        }
     });
 
     rightField.addEventListener('change', function () {
         rightLoaded = false;
-        rightIframe.src = this.value;
+        try {
+            const url = new URL(this.value);
+            rightIframe.src = url.href;
+        } catch (e) {
+            console.error('Invalid URL:', this.value);
+        }
     });
 
     // Function to parse URL parameters