Fix escaping for exceptions in normal web ui (related to #2126)

locustio · Jul 11, 2022 · a367c3b · a367c3b
1 parent 218e7f4
commit a367c3b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/locust/web.py b/locust/web.py
@@ -355,8 +355,8 @@ def exceptions() -> Response:
                     "exceptions": [
                         {
                             "count": row["count"],
-                            "msg": row["msg"],
-                            "traceback": row["traceback"],
+                            "msg": escape(row["msg"]),
+                            "traceback": escape(row["traceback"]),
                             "nodes": ", ".join(row["nodes"]),
                         }
                         for row in (environment.runner.exceptions.values() if environment.runner is not None else [])