Sanitize html using galaxy.util.sanitize_html (which in turn calls bleach with appropriate configuration) in message.mako

templates/message.mako

@@ -1,5 +1,5 @@
 <%!
-    import bleach
+    from galaxy.util.sanitize_html import sanitize_html
 
     def inherit(context):
         if context.get('use_panels'):
@@ -63,5 +63,5 @@
         if status not in ("danger", "info", "success", "warning"):
             status = "info"
     %>
-    <div class="message mt-2 alert alert-${status}">${_(bleach.clean(msg))}</div>
+    <div class="message mt-2 alert alert-${status}">${_(sanitize_html(msg))}</div>
 </%def>