diff --git a/vulnerable_xss.py b/vulnerable_xss.py
index 59b8652..00705a9 100644
--- a/vulnerable_xss.py
+++ b/vulnerable_xss.py
@@ -49,7 +49,8 @@ def profile():
 
 @app.route('/error')
 def error_page():
-    error_msg = request.args.get('msg')
+    from markupsafe import escape
+    error_msg = escape(request.args.get('msg', ''))
     
     return f"<div class='error'>{error_msg}</div>"