add angle bracket escaping to Custom XPath encoder

Author: michaeloffner

source/java/src/org/lucee/extension/guard/CustomEncoder.java

@@ -68,6 +68,12 @@ public static String encodeForXPath(String input) {
 			case '\"':
 				sb.append(""");
 				break;
+			case '<':
+				sb.append("&lt;");
+				break; // Add this
+			case '>':
+				sb.append("&gt;");
+				break; // Add this
 			default:
 				if (c < 32 || c > 126) {
 					sb.append('\\').append(Integer.toHexString(c | 0x100).substring(1));