From 09c93bfb39ccfe0fc0780e68e5c65258c1060839 Mon Sep 17 00:00:00 2001
From: Winston Chang <winston@stdout.org>
Date: Wed, 23 Mar 2016 14:00:58 -0500
Subject: [PATCH] Escape ID

---
 srcjs/notifications.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/srcjs/notifications.js b/srcjs/notifications.js
index 480f06866..91aef0fe3 100644
--- a/srcjs/notifications.js
+++ b/srcjs/notifications.js
@@ -76,7 +76,7 @@ exports.notifications = (function() {
 
   // Returns an individual notification DOM object (wrapped in jQuery).
   function get(id) {
-    return _getPanel().find('#shiny-notification-' + id);
+    return _getPanel().find('#shiny-notification-' + $escape(id));
   }
 
   // Return array of all notification IDs