diff --git a/include/lib/html_input.class.php b/include/lib/html_input.class.php
index 7fc047a50..4a5174bc4 100755
--- a/include/lib/html_input.class.php
+++ b/include/lib/html_input.class.php
@@ -1210,7 +1210,7 @@ class HtmlInput
         for ($i=0; $i<$nb_attribute; $i++)
         {
             $r.=sprintf(' %s="%s" ', $this->attribute[$i][0],
-                    $this->attribute[$i][1]);
+                    htmlentities($this->attribute[$i][1]));
         }
         return $r;
     }