Contextual Adminbar Color < 0.3 - Authenticated Stored Cross-Site Scripting Issue

Description

The variable $message is not escaped :
$message = sanitize_text_field( $current_settings['message'] );
Then, it's printed in a value attribute :
value="<?php echo $message; ?>"