diff --git a/public/js/icinga/loader.js b/public/js/icinga/loader.js
index fbbce393a..8a6bf7ffe 100644
--- a/public/js/icinga/loader.js
+++ b/public/js/icinga/loader.js
@@ -711,7 +711,7 @@
                 c += ' persist';
             }
             var $notice = $(
-                '<li class="' + c + '">' + message + '</li>'
+                '<li class="' + c + '">' + this.icinga.utils.escape(message) + '</li>'
             ).appendTo($('#notifications'));
 
             this.icinga.ui.fixControls();