Function html_escape

atomic-cli/src/commands/triage/output.rs:495–508

HTML-escape the five significant characters so no interpolated string can inject markup.

(s: &str)

/// HTML-escape the five significant characters so no interpolated string can
/// inject markup.
fn html_escape(s: &str) -> String {
    let mut out = String::with_capacity(s.len());
    for ch in s.chars() {
        match ch {
            '&' => out.push_str("&"),
            '<' => out.push_str("&lt;"),
            '>' => out.push_str("&gt;"),
            '"' => out.push_str("&quot;"),
            '\'' => out.push_str("&#39;"),
            _ => out.push(ch),
        }
    }
    out
}

/// Escape a JSON payload for safe embedding inside a `<script>` element: the
/// `<`, `>`, and `&` bytes are rewritten to their `\u00XX` JSON escapes so the