Fixing adding special characters in audit comments of security policies (#39608) (#39662)

* Fixing adding special characters in audit comments of security policies

& <> + chars are breaking the command
See slack:
https://panw-global.slack.com/archives/C011E5T5K17/p1744962593038919

* Update CONTRIBUTORS.json

* Update pack_metadata.json

Bumping up the pack version

* Create 2_3_10.md

adding release notes

* Update 2_3_10.md

fixing md

* Create 2_3_11.md

bumping up version again

* Update pack_metadata.json

* Delete Packs/PAN-OS/ReleaseNotes/2_3_10.md

Co-authored-by: Maciej Drobniuch <mdrobniuch@paloaltonetworks.com>

Author: content-bot

Packs/PAN-OS/CONTRIBUTORS.json

@@ -1 +1 @@
-["Adam Baumeister", "Adam Burt", "Johnathan Wilkes"]
+["Adam Baumeister", "Adam Burt", "Johnathan Wilkes", "Maciej Drobniuch"]

Packs/PAN-OS/Integrations/Panorama/Panorama.py

@@ -4045,6 +4045,7 @@ def build_audit_comment_cmd(xpath, audit_comment, xml_type="set") -> str:
     """
     Builds up the needed `cmd` param to get or update the audit comment of a policy rule.
     """
+    audit_comment = html.escape(html.escape(audit_comment)) # special characters need to be escaped twice to be properly stored on PANOS side.
     if xml_type == "set":
         return f"<set><audit-comment><xpath>{xpath}</xpath><comment>{audit_comment}</comment></audit-comment></set>"
     elif xml_type == "show":

Packs/PAN-OS/ReleaseNotes/2_3_11.md

@@ -0,0 +1,5 @@
+#### Integrations
+
+##### Palo Alto Networks PAN-OS
+
+Fixed handling special characters in additional commends of security rules.

Packs/PAN-OS/pack_metadata.json

@@ -2,7 +2,7 @@
     "name": "PAN-OS by Palo Alto Networks",
     "description": "Manage Palo Alto Networks Firewall and Panorama. Use this pack to manage Prisma Access through Panorama. For more information see Panorama documentation.",
     "support": "xsoar",
-    "currentVersion": "2.3.10",
+    "currentVersion": "2.3.11",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",
@@ -49,4 +49,4 @@
         "X5",
         "ENT_PLUS"
     ]
-}
+}