Escape job information in HTML

app_debug.py

@@ -1,5 +1,6 @@
 from os import listdir
 from os.path import isfile, join
+import html
 
 import gradio as gr
 
@@ -46,11 +47,11 @@ def get_config_files():
     return config_files
 
 def get_jobs_info_in_queue():
-    return [f"⌛️job id {job[0]}: {job[2]}<br/>" for job in pipe.jobs]
+    return [f"⌛️job id {html.escape(job[0])}: {html.escape(job[2])}<br/>" for job in pipe.jobs]
 
 def get_queue_status():
     if len(pipe.jobs) > 0 or pipe.current is not None:
-        return f'<div style="padding-top: 5%">Current job: {pipe.current} <br/> Jobs in queue: <br/> {"".join(get_jobs_info_in_queue())}</div>'
+        return f'<div style="padding-top: 5%">Current job: {html.escape(pipe.current)} <br/> Jobs in queue: <br/> {"".join(get_jobs_info_in_queue())}</div>'
     else:
         return '<div style="padding-top: 5%">No jobs in queue, please submit an evaluation task from another tab.</div>'