Fix escaping capture name in HTML report.

Author: jcamiel

integration/hurl/tests_ok/html_report_injection/html_report_injection.hurl

@@ -1,3 +1,5 @@
 GET http://localhost:8000/evil-headers
 X-Bar: <script>alert('Hello')</script>
 HTTP 200
+[Captures]
+\u{3c}script\u{3e}alert\u{28}\u{22}Hello\u{22}\u{29}\u{3c}\u{2f}script\u{3e}: status

packages/hurl/src/report/html/run.rs

@@ -88,8 +88,13 @@ fn get_entry_html(entry: &EntryResult, entry_index: usize, secrets: &[&str]) ->
         let mut values = entry
             .captures
             .iter()
-            .map(|c| (&c.name, c.value.to_string().redact(secrets).html_escape()))
-            .collect::<Vec<(&String, String)>>();
+            .map(|c| {
+                (
+                    c.name.html_escape(),
+                    c.value.to_string().redact(secrets).html_escape(),
+                )
+            })
+            .collect::<Vec<_>>();
         values.sort_by_key(|a| a.0.to_lowercase());
         let table = new_table("Captures", &values);
         text.push_str(&table);