diff --git a/javascript/logMonitor.js b/javascript/logMonitor.js
index ab70400af..7ace190c8 100644
--- a/javascript/logMonitor.js
+++ b/javascript/logMonitor.js
@@ -17,20 +17,24 @@ function dateToStr(ts) {
   return s;
 }
 
+function htmlEscape(text) {
+  return text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;")
+}
+
 async function logMonitor() {
   const addLogLine = (line) => {
     try {
-      const l = JSON.parse(line.replaceAll('\n', ' '));
+      const l = JSON.parse(line.replaceAll('\n', ' ').replaceAll('\\', '\\\\'));
       const row = document.createElement('tr');
       // row.style = 'padding: 10px; margin: 0;';
       const level = `<td style="color: var(--color-${l.level.toLowerCase()})">${l.level}</td>`;
       if (l.level === 'WARNING') logWarnings++;
       if (l.level === 'ERROR') logErrors++;
       const module = `<td style="color: var(--var(--neutral-400))">${l.module}</td>`;
-      row.innerHTML = `<td>${dateToStr(l.created)}</td>${level}<td>${l.facility}</td>${module}<td>${l.msg}</td>`;
+      row.innerHTML = `<td>${dateToStr(l.created)}</td>${level}<td>${l.facility}</td>${module}<td>${htmlEscape(l.msg)}</td>`;
       logMonitorEl.appendChild(row);
     } catch (e) {
-      error(`logMonitor: ${line}`);
+      error(`logMonitor: ${e}\n${line}`);
     }
   };