Getting extra issue XSS with Path Traversal

[AkashSahai]

Hi @davewichers,

Hope you are doing well!

I identified an extra issue (XSS) in the OWASP Benchmark (Python) test case under the Path Traversal category.
Test cases:

1. /benchmark/pathtraver-00/BenchmarkTest00615
2. /benchmark/pathtraver-00/BenchmarkTest00619

Rule: Path Traversal

this is due to missing escape_for_html in below code for filename.

except IOError as e:
			RESPONSE += (
				f'Problem reading from file \'{fileName}\': '
				f'{escape_for_html(e.strerror)}'
			)
		return RESPONSE

[davewichers]

Thanks for reporting. While it doesn't affect a tool's score, it's good to clean up extraneous unintentional vulns. I'll get this fixed soon.