fix: security fixes

Author: chris-argo

README.md

@@ -1,6 +1,6 @@
 ## **PyTestBehave Test Automation Framework**
 
-![GitHub actions workflow status](https://img.shields.io/github/actions/workflow/status/argodevops/pyTestBehave/main)
+![GitHub actions workflow status](https://img.shields.io/github/actions/workflow/status/argodevops/pyTestBehave/main.yml)
 ![GitHub language count](https://img.shields.io/github/languages/count/argodevops/pyTestBehave)
 ![PyPI - License](https://img.shields.io/pypi/l/pytestbehave)
 ![PyPI - Version](https://img.shields.io/pypi/v/pytestbehave)

src/features/support/builder/example/examplerequestbuilder.py

@@ -16,7 +16,7 @@ class XMLMessageBuilder:
     def __init__(self, context):
         self.faker = Faker("en_GB")
         self.context = context
-        self.environment = Environment(loader=FileSystemLoader("templates/"))
+        self.environment = Environment(loader=FileSystemLoader("templates/"), autoescape=True)
 
     def header(self, auth_token):
         """builds request header for a message"""

src/features/support/pageactions/basepage.py

@@ -104,8 +104,12 @@ def type_in_locator(
         sensitive=False,
     ):
         """Type in locator"""
-        logging.debug(
-            "Typing in locator %s text %s", locator.get_formatted_locator(), text
+        if sensitive:
+            logging.debug(
+                "Typing in locator %s text *****", locator.get_formatted_locator())    
+        else:
+            logging.debug(
+                "Typing in locator %s text %s", locator.get_formatted_locator(), text
         )
         self.assert_element_displayed_and_click(locator)
         self.element_action.type(