cucumber / react-components

React components for Cucumber
MIT License
32 stars 10 forks source link

HTML elements in feature description are not included #354

Open mpkorstanje opened 1 month ago

mpkorstanje commented 1 month ago

👓 What did you see?

Feature: Belly

  Header text

  </script><script>alert('hello')</script>

  Footer text

  Scenario: a few cukes "</script><script>alert('hello')</script>"
    Given I have 42 cukes in my belly
    When I wait 1 hour
    Then my belly should growl

Note that the first </script><script>alert('hello')</script> from the feature description is not included, the second is.

image

✅ What did you expect to see?

All html elements should be included, rendered as text.

📦 Which tool/library version are you using?

cucumber-html v21.4.1

This is important, because without https://github.com/cucumber/html-formatter/pull/312 the report will not render at all.

🔬 How could we reproduce it?

No response

📚 Any additional context?

No response