Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing HTML Escaping when using File Path Arguments or gauge log messages #326

Open
Farix1337 opened this issue Nov 29, 2024 · 1 comment

Comments

@Farix1337
Copy link

Farix1337 commented Nov 29, 2024

We have the issue that we can´t use < and > in files when they are used as file path arguments, otherwise they are interepreted as html tags in the HTML Report an therefore the text between < and > is missing.

Steps to reproduce

  1. create a step which accepts file arguments for example a json object.
  2. create a file which contains the text
  3. execute the spec
  4. open the file argument in the generated html report

result:
the text foobar will be invisible. When investigating the html a html tag which does nothing is shown.

Expected behavior:
Any form of input into the html should first be html escaped with implementation like org.springframework.web.util.HtmlUtils#htmlEscape or some simlar apache implementation.
Because the same issue happens when using "Gauge.writeMessage" but in this cause the developers can escape their content on their own so itś less of an issue.

@chadlwilson
Copy link
Contributor

If you think the problem is in this plugin (sounds like it?),.perhaps you can submit a PR to fix? (Although code is go, not Java)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants