diff --git a/html/priv_user.php b/html/priv_user.php
index 95d3f64a9..20c06811f 100644
--- a/html/priv_user.php
+++ b/html/priv_user.php
@@ -206,7 +206,7 @@ $mod_user=new User(DbConnect(),$uid);
 foreach ( $Dossier as $rDossier) {
 
   $priv=$mod_user->get_privilege($rDossier['dos_id']);
-  printf("<TR><TD> Dossier : %s </TD>",$rDossier['dos_name']);
+  printf("<TR><TD> Dossier : %s </TD>",h($rDossier['dos_name']));
   
   $select=new widget('select');
   $select->table=1;