xml generator: handle '<' and '>' (#263)

src/errorlogger.cpp

@@ -118,11 +118,27 @@ std::string ErrorLogger::ErrorMessage::toXML() const
 {
     std::ostringstream xml;
     xml << "<error";
+    if (!_callStack.empty())
+    {
         xml << " file=\"" << _callStack.back().file << "\"";
         xml << " line=\"" << _callStack.back().line << "\"";
+    }
     xml << " id=\"" << _id << "\"";
     xml << " severity=\"" << _severity << "\"";
-    xml << " msg=\"" << _msg << "\"";
+
+    // Replace characters in message
+    std::string m(_msg);
+    std::string::size_type pos = 0;
+    while ((pos = m.find_first_of("<>", pos)) != std::string::npos)
+    {
+        if (m[pos] == '<')
+            m.insert(pos+1, "&lt;");
+        if (m[pos] == '>')
+            m.insert(pos+1, "&gt;");
+        m.erase(pos, 1);
+    }
+
+    xml << " msg=\"" << m << "\"";
     xml << "/>";
     return xml.str();
 }

test/testcppcheck.cpp

@@ -50,6 +50,8 @@ private:
     {
         TEST_CASE(linenumbers);
         // TEST_CASE(linenumbers2);
+
+        TEST_CASE(xml);
     }
 
     void linenumbers()
@@ -80,6 +82,15 @@ private:
         // Compare results..
         ASSERT_EQUALS("[file.cpp:5]: (error) Memory leak: string\n", errout.str());
     }
+
+
+    void xml()
+    {
+        // Test the errorlogger..
+        ErrorLogger::ErrorMessage errmsg;
+        errmsg._msg = "ab<cd>ef";
+        ASSERT_EQUALS("<error id=\"\" severity=\"\" msg=\"ab&lt;cd&gt;ef\"/>", errmsg.toXML());
+    }
 };
 
 REGISTER_TEST(TestCppcheck)