diff --git a/src/js/msp/msp_debug_dashboard.js b/src/js/msp/msp_debug_dashboard.js
index 1cee34ba..deec1ddb 100644
--- a/src/js/msp/msp_debug_dashboard.js
+++ b/src/js/msp/msp_debug_dashboard.js
@@ -794,7 +794,10 @@ export class MSPDebugDashboard {
         };
 
         container.innerHTML = activeAlerts
-            .map(([alertType, _]) => `<div class="alert-item">${alertMessages[alertType] || alertType}</div>`)
+            .map(
+                ([alertType, _]) =>
+                    `<div class="alert-item">${alertMessages[alertType] || this.escapeHtml(alertType)}</div>`,
+            )
             .join("");
     }