fix(webhook): Missing quotation -> broken rendering

[kiblik]

Fix #11959 and https://owasp.slack.com/archives/C2P5BA8MN/p1744296388842759

[dryrunsecurity]

This pull request contains potential security vulnerabilities including an XSS risk in a JSON template tag, unsafe JSON serialization, and URL exposure in test environments, which could introduce risks related to cross-site scripting, information leakage, and insecure configuration.

💭 Unconfirmed Findings (3)

Vulnerability	XSS Vulnerability Potential in as_json.py
Description	Identified in dojo/templatetags/as_json.py, this vulnerability involves the use of mark_safe() which bypasses Django's automatic HTML escaping. This could potentially introduce Cross-Site Scripting (XSS) risks if user-controlled data is passed through the filter without proper sanitization.

Vulnerability	Unsafe JSON Serialization
Description	Located in dojo/templatetags/as_json.py, this issue involves using json.dumps() without additional parameters. This could lead to potential exposure of sensitive information or JSON injection if input is not carefully controlled.

Vulnerability	URL Exposure in Test Environment
Description	Found in unittests/test_notifications.py, this finding involves multiple hardcoded HTTP (not HTTPS) localhost URLs. While specific to a test environment, it demonstrates potential security configuration risks in URL handling.

---

All finding details can be found in the DryRun Security Dashboard.

[mtesauro]

Approved