diff --git a/srcjs/notifications.js b/srcjs/notifications.js
index 480f06866..91aef0fe3 100644
--- a/srcjs/notifications.js
+++ b/srcjs/notifications.js
@@ -76,7 +76,7 @@ exports.notifications = (function() {
 
   // Returns an individual notification DOM object (wrapped in jQuery).
   function get(id) {
-    return _getPanel().find('#shiny-notification-' + id);
+    return _getPanel().find('#shiny-notification-' + $escape(id));
   }
 
   // Return array of all notification IDs