Excape html string for junit output.

ccojocar · Feb 1, 2018 · 33fff95 · 33fff95
1 parent e92170b
commit 33fff95
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/output/junit_xml_format.go b/output/junit_xml_format.go
@@ -2,6 +2,7 @@ package output
 
 import (
 	"encoding/xml"
+	htmlLib "html"
 	"strconv"
 
 	"github.com/GoASTScanner/gas"
@@ -35,7 +36,7 @@ func generatePlaintext(issue *gas.Issue) string {
 	return "Results:\n" +
 		"[" + issue.File + ":" + issue.Line + "] - " +
 		issue.What + " (Confidence: " + strconv.Itoa(int(issue.Confidence)) +
-		", Severity: " + strconv.Itoa(int(issue.Severity)) + ")\n" + "> " + issue.Code
+		", Severity: " + strconv.Itoa(int(issue.Severity)) + ")\n" + "> " + htmlLib.EscapeString(issue.Code)
 }
 
 func groupDataByRules(data *reportInfo) map[string][]*gas.Issue {