From a2878fa066e579cdf99fde57f376e48e316374fa Mon Sep 17 00:00:00 2001
From: Nick O'Leary <knolleary@users.noreply.github.com>
Date: Wed, 3 Feb 2021 15:46:57 +0000
Subject: [PATCH] Sanitize branch name before displaying in notification
 message

---
 packages/node_modules/@node-red/editor-client/src/js/red.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/node_modules/@node-red/editor-client/src/js/red.js b/packages/node_modules/@node-red/editor-client/src/js/red.js
index ff8dad5bf..b0adca3bd 100644
--- a/packages/node_modules/@node-red/editor-client/src/js/red.js
+++ b/packages/node_modules/@node-red/editor-client/src/js/red.js
@@ -231,7 +231,7 @@ var RED = (function() {
                             "merge-complete": RED._("notification.project.merge-complete")
                         }[msg.action];
                         loader.end()
-                        RED.notify("<p>"+message+"</p>");
+                        RED.notify($("<p>").text(message));
                         RED.sidebar.info.refresh()
                     });
                 });