XSS vulnerability in the Test Run page at the Cucumber step results

Due to a XSS vulnerability, it's possible to inject JS code into the HTML code of the Test Run page, when importing Cucumber execution results.

Steps to reproduce

Step	Result
Inject the <script> in the error message - Cucumber Execution report
Import the Execution report
Go to the Test Run page and expand the cucumber steps clicking on the blue triangle