Merge pull request #2676 from thornbill/fix-displaymessage-xss

(cherry picked from commit 70b41ff005)
Signed-off-by: Joshua M. Boniface <joshua@boniface.me>

src/components/toast/toast.js

@@ -22,7 +22,7 @@ export default function (options) {
 
     const elem = document.createElement('div');
     elem.classList.add('toast');
-    elem.innerHTML = options.text;
+    elem.textContent = options.text;
 
     document.body.appendChild(elem);