diff --git a/include/preod.inc.php b/include/preod.inc.php
index 2d5923ba3..98d31913b 100644
--- a/include/preod.inc.php
+++ b/include/preod.inc.php
@@ -86,7 +86,7 @@ require_once('class_pre_operation.php');
 		echo '<tr class="even">';
 	  else 
 		echo '<tr>';
-	  echo '<td>'.$row['od_name'].'</td>';
+	  echo '<td>'.h($row['od_name']).'</td>';
 	  echo '<td>';
 	  echo '<form method="POST">';
 	  echo dossier::hidden();