From 478c69573a98985e7606c7df360c10cbed68956f Mon Sep 17 00:00:00 2001
From: Sj-Si <sjw.jetty@gmail.com>
Date: Wed, 29 May 2024 17:21:59 -0400
Subject: [PATCH] Escape description HTML

---
 modules/ui_extra_networks.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/modules/ui_extra_networks.py b/modules/ui_extra_networks.py
index a4c366f29..6205195bc 100644
--- a/modules/ui_extra_networks.py
+++ b/modules/ui_extra_networks.py
@@ -1049,6 +1049,9 @@ class ExtraNetworksPage:
         if not description:
             description = ""
 
+        if not shared.opts.extra_networks_card_description_is_html:
+            description = html.escape(description)
+
         model_specific = self.get_model_detail_extra_html(model_name)
 
         return self.model_details_tpl.format(