Module display 

Escaping shared by the text and Markdown reports.

CSV cells, scanned YAML, and fetched API fields all land in these reports unvalidated, so a control character or a Unicode bidi override in one of them must never reach the terminal or a Markdown table raw.

Functions

display_path

A file path as the reports show it: with / separators on every OS, so --workflows samples/.github/workflows on Windows prints samples/.github/workflows/lint.yml, not a mix of / and \.

escape_display

Replaces every C0 control character, DEL, and Unicode bidi override with a visible escape (\n, \t, \xHH, \u{HHHH}). Everything else, including other printable Unicode, passes through unchanged. JSON output does not use this: serde_json already escapes control characters.