Potential XSS vulnerability when having pointer interaction enabled

[TobiReskiAI]

Describe the bug
When rendering a <ForceGraph3D enablePointerInteraction /> with a node with an unsanitized name, a tooltip is shown which renders the name in an unsafe manner.

To Reproduce
Steps to reproduce the behavior:

1. Render a <ForceGraph3D enablePointerInteraction /> with a node which includes an unsafe string like "'><h1><img src=x onerror=alert('operation-name')><script>alert('hello-world!')</script>test123
2. Hover on that node.
3. The alert is triggerd.

Expected behavior
All rendered elements are sanitzied..

Screenshots

Desktop (please complete the following information):

• OS: MacOS 15.3.2
• Arc