diff --git a/packages/better-auth/src/api/routes/error.ts b/packages/better-auth/src/api/routes/error.ts
index 3704a2eca8..da8cb6a01c 100644
--- a/packages/better-auth/src/api/routes/error.ts
+++ b/packages/better-auth/src/api/routes/error.ts
@@ -1,6 +1,15 @@
import { HIDE_METADATA } from "../../utils/hide-metadata";
import { createAuthEndpoint } from "../call";
+function sanitize(input: string): string {
+ return input
+ .replace(/&/g, "&")
+ .replace(//g, ">")
+ .replace(/"/g, """)
+ .replace(/'/g, "'");
+}
+
const html = (errorCode: string = "Unknown") => `
@@ -78,7 +87,9 @@ const html = (errorCode: string = "Unknown") => `
Better Auth Error
We encountered an issue while processing your request. Please try again or contact the application owner if the problem persists.
Return to Application
- Error Code: ${errorCode}
+ Error Code: ${sanitize(
+ errorCode,
+ )}
`;