Escape error message (in case it comes from 3rd-party tool)

src/Glpi/Application/ErrorHandler.php

@@ -499,7 +499,7 @@ private function outputDebugMessage(string $error_type, string $message, string
                     $verbosity = OutputInterface::VERBOSITY_VERY_VERBOSE;
                     break;
             }
-            $message = $error_type . ': ' . $message;
+            $message = $error_type . ': ' . \htmlspecialchars($message);
             if (null !== $format) {
                 $message = sprintf('<%1$s>%2$s</%1$s>', $format, $message);
             }