diff --git a/core/js/dist/login.js b/core/js/dist/login.js
index a9077ea510f6f62efadc418974a0a2b9fd7bb8b8..97368eb6c37f8de03622c73e10130053546f500b 100644
Binary files a/core/js/dist/login.js and b/core/js/dist/login.js differ
diff --git a/core/js/dist/login.js.map b/core/js/dist/login.js.map
index 3c47c285047fc847e7318336df98de8e4db1875e..a8da9de39351658d922307019704b72b3e2b836e 100644
Binary files a/core/js/dist/login.js.map and b/core/js/dist/login.js.map differ
diff --git a/core/js/dist/main.js b/core/js/dist/main.js
index 2aa29598a774f0dd4e58a9813ba9f488044341c4..6cb294b75b690eca8d43ee46a9ed0459fe107536 100644
Binary files a/core/js/dist/main.js and b/core/js/dist/main.js differ
diff --git a/core/js/dist/main.js.map b/core/js/dist/main.js.map
index 04b5ce00e0f6e03c730d04e9209aecd86a1aeffd..a020407e58462aa32f6340927dd9a5e034c69a13 100644
Binary files a/core/js/dist/main.js.map and b/core/js/dist/main.js.map differ
diff --git a/core/src/OC/notification.js b/core/src/OC/notification.js
index adac95f1d37dbe5df07f121c27126e46fc9fa18c..8b7e43373a62e3d4f4151241568587a31d2cf450 100644
--- a/core/src/OC/notification.js
+++ b/core/src/OC/notification.js
@@ -115,9 +115,18 @@ export default {
 	 * @deprecated 17.0.0 use the `@nextcloud/dialogs` package
 	 */
 	show(text, options) {
+		const escapeHTML = function(text) {
+			return text.toString()
+				.split('&').join('&')
+				.split('<').join('&lt;')
+				.split('>').join('&gt;')
+				.split('"').join('&quot;')
+				.split('\'').join('&#039;')
+		}
+
 		options = options || {}
 		options.timeout = (!options.timeout) ? TOAST_PERMANENT_TIMEOUT : options.timeout
-		const toast = showMessage(text, options)
+		const toast = showMessage(escapeHTML(text), options)
 		toast.toastElement.toastify = toast
 		return $(toast.toastElement)
 	},