Escape html entities in console

Fix #4020

Author: uglide

src/app/qmlutils.cpp

@@ -165,3 +165,8 @@ void QmlUtils::deleteTextWrapper(QObject *w)
         w->deleteLater();
     }
 }
+
+QString QmlUtils::escapeHtmlEntities(const QString &t)
+{
+    return t.toHtmlEscaped();
+}

src/app/qmlutils.h

@@ -22,4 +22,5 @@ class QmlUtils : public QObject
     Q_INVOKABLE void addNewValueToDynamicChart(QtCharts::QXYSeries* series, double value);
     Q_INVOKABLE QObject* wrapLargeText(const QByteArray &text);
     Q_INVOKABLE void deleteTextWrapper(QObject* w);
+    Q_INVOKABLE QString escapeHtmlEntities(const QString& t);
 };

src/qml/console/QConsole.qml

@@ -38,9 +38,9 @@ Rectangle {
     function addOutput(text, type) {
 
         if (type == "error") {
-            textArea.append("<span style='color: red'>" + text + '</span>')
+            textArea.append("<span style='color: red'>" + qmlUtils.escapeHtmlEntities(text) + '</span>')
         } else {
-            textArea.append("<pre style='color: white'>" + text + '</pre>')
+            textArea.append("<pre style='color: white'>" + qmlUtils.escapeHtmlEntities(text) + '</pre>')
         }
 
         if (type == "complete" || type == "error") {