From 246e7b91cc97f121ab2d8d1a07f4cb7261acf613 Mon Sep 17 00:00:00 2001
From: "Steven R. Loomis" <srloomis@us.ibm.com>
Date: Fri, 24 Feb 2017 17:21:12 -0800
Subject: [PATCH] Move UI-WELCOME_ERROR from a script insertion to a hidden
 <div>

* store the error message in an extra div for later retrieval

Fixes: https://github.com/elastic/kibana/issues/10580
---
 src/ui/ui_render/bootstrap/template.js.hbs | 4 +++-
 src/ui/ui_render/views/ui_app.jade         | 6 ++++++
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/src/ui/ui_render/bootstrap/template.js.hbs b/src/ui/ui_render/bootstrap/template.js.hbs
index a8577bfb5ce4ab3..8a4c5fe5273a987 100644
--- a/src/ui/ui_render/bootstrap/template.js.hbs
+++ b/src/ui/ui_render/bootstrap/template.js.hbs
@@ -22,13 +22,15 @@ window.onload = function () {
       // make subsequent calls to failure() noop
       failure = function () {};
 
+      // Pull failure text from HTML to ensure proper escaping
+      var failureText = document.getElementById('kibanaLoader__error').innerText;
       var err = document.createElement('h1');
       err.style['color'] = 'white';
       err.style['font-family'] = 'monospace';
       err.style['text-align'] = 'center';
       err.style['background'] = '#F44336';
       err.style['padding'] = '25px';
-      err.innerText = '{{i18n 'UI-WELCOME_ERROR'}}';
+      err.innerText = failureText;
 
       document.body.innerHTML = err.outerHTML;
     }
diff --git a/src/ui/ui_render/views/ui_app.jade b/src/ui/ui_render/views/ui_app.jade
index 38942e7bf1ee380..751ef00700877d4 100644
--- a/src/ui/ui_render/views/ui_app.jade
+++ b/src/ui/ui_render/views/ui_app.jade
@@ -48,6 +48,10 @@ block content
       animation: rotation .75s .5s infinite linear, fadeIn 1s .5s ease-in-out forwards;
     }
 
+    #kibanaLoader__error {
+      display: none;
+    }
+
     .kibanaWelcomeLogoCircle {
       position: absolute;
       left: 4px;
@@ -109,5 +113,7 @@ block content
         .kibanaWelcomeLogo
     .kibanaWelcomeText
       | #{i18n('UI-WELCOME_MESSAGE')}
+    #kibanaLoader__error
+      | #{i18n('UI-WELCOME_ERROR')}
 
   script(src='#{bundlePath}/app/#{app.getId()}/bootstrap.js')