Language: Java
Label: safe
CWE: CWE-79 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Code:
	public void testName() throws Exception {
		var m = new EscapeModel("\"&\'<=>`", "\"&\'<=>`");
		String actual = EscapeModelRenderer.of().execute(m);
		String expected = """
				<div alt="&quot;&amp;&#x27;&lt;&#x3D;&gt;&#x60;">
				&quot;&amp;&#x27;&lt;&#x3D;&gt;&#x60;
				</div>
				""";

		assertEquals(expected, actual);
	}