From eecbd3cfb829083e9c2b4b4fe40251e9941b97bd Mon Sep 17 00:00:00 2001
From: Edward Betts <edward@4angle.com>
Date: Thu, 14 May 2026 10:34:19 +0100
Subject: [PATCH] Escape error messages on error page

---
 templates/error.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/error.html b/templates/error.html
index 60246fb..0120bec 100644
--- a/templates/error.html
+++ b/templates/error.html
@@ -8,7 +8,7 @@
     <div class="col-md-7">
       <div class="alert alert-danger">
         <h4 class="alert-heading">Something went wrong</h4>
-        <p class="mb-0"><code>{{ message | replace('\n', '<br>') | safe }}</code></p>
+        <p class="mb-0"><code>{{ message | e | replace('\n', '<br>\n') | safe }}</code></p>
       </div>
       <a href="{{ url_for('index') }}" class="btn btn-outline-secondary btn-sm">Back to home</a>
     </div>