--- /srv/viewcvs/lib/debug.py.orig	2004-12-09 17:28:26.268442577 +0100
+++ /srv/viewcvs/lib/debug.py	2004-12-09 17:28:31.386142630 +0100
@@ -50,7 +50,8 @@
 
 class ViewCVSException:
   def __init__(self, msg, status=None):
-    self.msg = msg
+    import cgi
+    self.msg = cgi.escape(msg)
     self.status = status
 
   def __str__(self):