Before reporting an issue

[x] I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

login/ui

Describe the bug

The

Version

26.4

Regression

[ ] The issue is a regression

Expected behavior

The HTML should be escaped

Actual behavior

It is not escaped:

<img width="524" height="144" alt="Image" src="https://github.com/user-attachments/assets/93ced8ce-c51f-462b-b3c4-9431a5e71f36" />

How to Reproduce?

• Create a passkey as a second factor and provide it a label with HTML. Here a screenshot from the admin UI:

<img width="740" height="81" alt="Image" src="https://github.com/user-attachments/assets/2c2f101f-6849-4067-b606-19e595aa111a" />

Anything else?

I'll create a PR