fix(security): add csrf filter + prevent xss attacks by escaping user input

- update CI4 to v4.1.9's stable production package
- update php and js dependencies to latest

app/Controllers/EpisodeCommentController.php

@@ -109,6 +109,7 @@ class EpisodeCommentController extends BaseController
                 helper('form');
                 return view('episode/comment', $data);
             }
+
             return view('episode/comment', $data, [
                 'cache' => DECADE,
                 'cache_name' => $cacheName,