From 417047dae79c902c91b48940bb36214f1fd9dff0 Mon Sep 17 00:00:00 2001
From: Bruno Meneguello <1322552+bkmeneguello@users.noreply.github.com>
Date: Tue, 29 Dec 2020 18:19:27 -0300
Subject: [PATCH] Escape HTML entities of Cluster label

---
 diagrams/__init__.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/diagrams/__init__.py b/diagrams/__init__.py
index 1f953e6d..19b23152 100644
--- a/diagrams/__init__.py
+++ b/diagrams/__init__.py
@@ -1,4 +1,5 @@
 import contextvars
+import html
 import os
 import uuid
 from pathlib import Path
@@ -348,7 +349,7 @@ class Node(_Cluster):
             self.dot.graph_attr["label"] = '<<TABLE border="0"><TR>'\
                 '<TD fixedsize="true" width="' + str(self._icon_size) + '" height="' + str(self._icon_size) + '">'\
                 '<IMG SRC="' + icon + '"></IMG></TD>'\
-                '<TD>' + self.label + '</TD></TR></TABLE>>'
+                '<TD>' + html.escape(self.label) + '</TD></TR></TABLE>>'
 
         if not self._validate_direction(self._direction):
             raise ValueError(f'"{self._direction}" is not a valid direction')