[Backport] CVE-2025-6557: Insufficient data validation in DevTools

Manual cherry-pick of patch originally reviewed on
https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/6573473:
Also handle sole carriage return character (CR) when escaping curl command.

Bug: 406631048

Change-Id: I947dbf54d290ada4424bfbfcc817e1e7244bf438
Reviewed-on: https://chromium-review.googlesource.com/c/devtools/devtools-frontend/+/6573473
Auto-Submit: Danil Somsikov <[email protected]>
Commit-Queue: Danil Somsikov <[email protected]>
Reviewed-by: Benedikt Meurer <[email protected]>
Commit-Queue: Benedikt Meurer <[email protected]>
Reviewed-on: https://codereview.qt-project.org/c/qt/qtwebengine-chromium/+/659333
Reviewed-by: Moss Heim <[email protected]>

Author: danilsomsikov

chromium/third_party/devtools-frontend/src/front_end/panels/network/NetworkLogView.ts

@@ -2401,7 +2401,7 @@ export class NetworkLogView extends Common.ObjectWrapper.eventMixin<EventTypes,
               .replace(/"/g, '\\"')
               .replace(/[^a-zA-Z0-9\s_\-:=+~'\/.',?;()*`]/g, '^$&')
               .replace(/%(?=[a-zA-Z0-9_])/g, '%^')
-              .replace(/\r?\n/g, '^\n\n') +
+              .replace(/\r?\n|\r/g, '^\n\n') +
           encapsChars;
     }