reports/xml/buffer.rb in arachni-0.4.5.2 vs reports/xml/buffer.rb in arachni-0.4.6

@@ -1,7 +1,7 @@
 =begin
-    Copyright 2010-2013 Tasos Laskos <[e-mail]>
+    Copyright 2010-2014 Tasos Laskos <[e-mail]>
 
     Licensed under the Apache License, Version 2.0 (the "License");
     you may not use this file except in compliance with the License.
     You may obtain a copy of the License at
 
@@ -47,10 +47,10 @@
     def add_remark( commenter, remark )
         append "<remark by=\"#{commenter}\" text=\"#{escape( remark )}\" />"
     end
 
     def add_param( name, value )
-        append "<param name=\"#{name}\" value=\"#{value}\" />"
+        append "<param name=\"#{name}\" value=\"#{escape(value)}\" />"
     end
 
     def add_mod( name )
         append "<module name=\"#{name}\" />"
     end