Merge pull request #601 from abersheeran/master

Fix html escape
encode · Aug 19, 2019 · cba5eb8 · cba5eb8
2 parents 753cf6a + 6060383
commit cba5eb8
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/starlette/middleware/errors.py b/starlette/middleware/errors.py
@@ -1,3 +1,4 @@
+import html
 import asyncio
 import inspect
 import traceback
@@ -221,7 +222,7 @@ def generate_html(self, exc: Exception, limit: int = 7) -> str:
             exc_html += self.generate_frame_html(frame, center_lineno, is_collapsed)
             is_collapsed = True
 
-        error = f"{traceback_obj.exc_type.__name__}: {traceback_obj}"
+        error = f"{traceback_obj.exc_type.__name__}: {html.escape(str(traceback_obj))}"
 
         return TEMPLATE.format(styles=STYLES, js=JS, error=error, exc_html=exc_html)