diff --git a/src/templates/proxyauth-login.ejs b/src/templates/proxyauth-login.ejs
index 9ff5d2413..66aab6e88 100644
--- a/src/templates/proxyauth-login.ejs
+++ b/src/templates/proxyauth-login.ejs
@@ -230,7 +230,7 @@
               body: JSON.stringify({ username: username, password: password, totpToken: totpToken })
           }).then(function (response) {
               if (response.status === 401 || response.status === 403) {
-                  document.getElementById('message').innerText = '{{ login.errorIncorrectCredentials }}';
+                  document.getElementById('message').innerText = "{{ login.errorIncorrectCredentials }}"; // FIXME this needs proper escaping for translated strings, single quotes break easily!
                   return;
               }