From ae70b704b035d4a623a738dcefb9f5daec082b06 Mon Sep 17 00:00:00 2001
From: httprunner <httprunner>
Date: Wed, 28 Nov 2018 22:57:46 +0800
Subject: [PATCH] fix attachment xss in html report

---
 httprunner/templates/report_template.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/httprunner/templates/report_template.html b/httprunner/templates/report_template.html
index 9b53e5fd..9bf153bf 100644
--- a/httprunner/templates/report_template.html
+++ b/httprunner/templates/report_template.html
@@ -361,7 +361,7 @@
             <div class="popup">
               <h2>Traceback Message</h2>
               <a class="close" href="#record_{{record_index}}">&times;</a>
-              <div class="content"><pre>{{ record.attachment }}</pre></div>
+              <div class="content"><pre>{{ record.attachment | e }}</pre></div>
             </div>
           </div>
         {% endif %}