#6282 Re-audit source and sinks

[martgil]

This PR re-audit and improve source and sinks.

close #6282

---

Tests (delete all except exactly one):

• Does not need tests (refactor only, docs or internal changes)

---

To be filled by reviewers

I have reviewed that this PR... (tick whichever items you personally focused on during this review):

• addresses the issue it closes (if any)
• code is readable and understandable
• is accompanied with tests, or tests are not needed
• is free of vulnerabilities
• is documented clearly and usefully, or doesn't need documentation

[sosnovsky]

in this file we also print raw error details at

flowcrypt-browser/extension/chrome/elements/attachment.ts

Line 185 in fd8857e

<pre data-test="error-details">${e.stack}\n\nDecryptError:\n${JSON.stringify(e.decryptError, undefined, 2)}</pre>

it can include some malicious code as well, let's perform Xss.escape there too

[sosnovsky]

we also have unescaped Date header at

flowcrypt-browser/extension/chrome/settings/inbox/inbox-modules/inbox-active-thread-module.ts

Line 188 in fd8857e

GmailParser.findHeader(msg, 'Date') ?? ''