Investigate security reports

[Janpot]

• [code-infra] Pin the only-allow version in the preinstall hook material-ui#49114
• [code-infra] Pin the only-allow version in the preinstall hook mui-x#23551
• [code-infra] Pin the only-allow version in the preinstall hook base-ui#5646
• [docs-infra] Rate-limit the documentation feedback endpoint material-ui#49115
• [docs-infra] Harden the OG image edge function material-ui#49116
• [system] Resolve InitColorSchemeScript %s placeholder at build time material-ui#49113
• [system] Serialize InitColorSchemeScript configuration values material-ui#49091
• [docs-infra] Validate docs feedback content before posting to Slack material-ui#49088
• follow up on #49113 and #49091 to serializeScriptValue instead of JSON.stringify to make attribute injection safe.

[github-actions]

This issue has been closed. If you have a similar problem but not exactly the same, please open a new issue.
Now, if you have additional information related to this issue or things that could help future readers, feel free to leave a comment.