debugger escapes title (#2719)

pallets · Jun 5, 2023 · 9acd3bf · 9acd3bf
2 parents 4afaf51 + 7475264
commit 9acd3bf
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -7,6 +7,7 @@ Unreleased
 
 -   Python 3.12 compatibility. :issue:`2704`
 -   Fix handling of invalid base64 values in ``Authorization.from_header``. :issue:`2717`
+-   The debugger escapes the exception message in the page title. :pr:`2719`
 
 
 Version 2.3.4

diff --git a/src/werkzeug/debug/tbtools.py b/src/werkzeug/debug/tbtools.py
@@ -327,7 +327,7 @@ def render_debugger_html(
             "evalex": "true" if evalex else "false",
             "evalex_trusted": "true" if evalex_trusted else "false",
             "console": "false",
-            "title": exc_lines[0],
+            "title": escape(exc_lines[0]),
             "exception": escape("".join(exc_lines)),
             "exception_type": escape(self._te.exc_type.__name__),
             "summary": self.render_traceback_html(include_title=False),