Merge pull request securego#163 from wongherlung/fix-junit-failure-text

Escape html string for JUnit output
ccojocar · Feb 2, 2018 · 8b87505 · 8b87505
2 parents e92170b + 33fff95
commit 8b87505
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/output/junit_xml_format.go b/output/junit_xml_format.go
@@ -2,6 +2,7 @@ package output
 
 import (
 	"encoding/xml"
+	htmlLib "html"
 	"strconv"
 
 	"github.com/GoASTScanner/gas"
@@ -35,7 +36,7 @@ func generatePlaintext(issue *gas.Issue) string {
 	return "Results:\n" +
 		"[" + issue.File + ":" + issue.Line + "] - " +
 		issue.What + " (Confidence: " + strconv.Itoa(int(issue.Confidence)) +
-		", Severity: " + strconv.Itoa(int(issue.Severity)) + ")\n" + "> " + issue.Code
+		", Severity: " + strconv.Itoa(int(issue.Severity)) + ")\n" + "> " + htmlLib.EscapeString(issue.Code)
 }
 
 func groupDataByRules(data *reportInfo) map[string][]*gas.Issue {