[FIX] Incomplete multi-character sanitization (#959)

JIRA: CPOUI5FOUNDATION-728
fixes: https://github.com/SAP/ui5-builder/security/code-scanning/20
Details:
https://codeql.github.com/codeql-query-help/javascript/js-incomplete-multi-character-sanitization/

lib/processors/manifestCreator.js

@@ -233,7 +233,11 @@ async function createManifest(
 			if ( library.getDocumentation() ) {
 				let desc = library.getDocumentation();
 				// remove all tags
-				desc = desc.replace(/\s+/g, " ").replace(/<\/?[a-zA-Z][a-zA-Z0-9_$.]*(\s[^>]*)>/g, "");
+				let prevDesc;
+				do { // Safely strip tags (https://codeql.github.com/codeql-query-help/javascript/js-incomplete-multi-character-sanitization/#example)
+					prevDesc = desc;
+					desc = desc.replace(/\s+/g, " ").replace(/<\/?[a-zA-Z][a-zA-Z0-9_$.]*(\s[^>]*)>/g, "");
+				} while (prevDesc !== desc);
 				// extract summary (first sentence)
 				const m = /^([\w\W]+?[.;!?])[^a-zA-Z0-9_$]/.exec(desc);
 				return m ? m[1] : desc;