Merge pull request #116 from SEAPUNK/patch-1

Escape HTML in test output

Author: toolmantim

ruby/bin/annotate

@@ -2,6 +2,7 @@
 
 require 'rexml/document'
 require 'rexml/element'
+require 'cgi/util'
 
 # Reads a list of junit files and returns a nice Buildkite build annotation on
 # STDOUT that summarizes any failures.
@@ -91,7 +92,7 @@ failures.each do |failure|
     puts "<p>#{failure.message.chomp.strip}</p>\n\n"
   end
   if failure.body
-    puts "<pre><code>#{failure.body.chomp.strip}</code></pre>\n\n"
+    puts "<pre><code>#{CGI.escapeHTML(failure.body.chomp.strip)}</code></pre>\n\n"
   end
   if failure.job
     puts "in <a href=\"##{failure.job}\">Job ##{failure.job}</a>"