1 files changed, 10 insertions, 1 deletions

diff --git a/core/src/OC/notification.js b/core/src/OC/notification.js
index adac95f1d37..8b7e43373a6 100644
--- a/core/src/OC/notification.js
+++ b/core/src/OC/notification.js
@@ -115,9 +115,18 @@ export default {
 	 * @deprecated 17.0.0 use the `@nextcloud/dialogs` package
 	 */
 	show(text, options) {
+		const escapeHTML = function(text) {
+			return text.toString()
+				.split('&').join('&')
+				.split('<').join('&lt;')
+				.split('>').join('&gt;')
+				.split('"').join('&quot;')
+				.split('\'').join('&#039;')
+		}
+
 		options = options || {}
 		options.timeout = (!options.timeout) ? TOAST_PERMANENT_TIMEOUT : options.timeout
-		const toast = showMessage(text, options)
+		const toast = showMessage(escapeHTML(text), options)
 		toast.toastElement.toastify = toast
 		return $(toast.toastElement)
 	},