🔒 fix(security): use stdlib html.escape() for complete XSS protection

[jacksong2049-prog]

🔒 Security Fix — Closes #48

Problem

Both docker_scanner.py and report_generator.py used a hand-rolled HTML escape table that only handled 5 characters (& < > " '), creating a potential XSS vector.

Fix

Replaced with Python's built-in html.escape(text, quote=True) which handles all HTML5 special characters per the standard library implementation.

Changed files

• docksec/docker_scanner.py
• docksec/report_generator.py

Before

html_escape_table = {
    "&": "&", '"': """, ...
}
return "".join(html_escape_table.get(c, c) for c in str(text))

After

import html
return html.escape(str(text), quote=True)

[advaitpatel]

looks good to me, thank you for your contributions!

[codecov-commenter]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️