2 files changed, 4 insertions, 4 deletions

diff --git a/detail.php b/detail.php
index 0fedb69..4fb43b0 100644
--- a/detail.php
+++ b/detail.php
@@ -27,8 +27,8 @@ $selected_plugins = !$plugin ? $CONFIG['overview'] : array($plugin);
 
 html_start();
 
-printf('<fieldset id="%s">', $host);
-printf('<legend>%s</legend>', $host);
+printf('<fieldset id="%s">', htmlentities($host));
+printf('<legend>%s</legend>', htmlentities($host));
 
 if (!$plugins = collectd_plugins($host)) {
         echo "Unknown host\n";
diff --git a/host.php b/host.php
index b398630..97f4dae 100644
--- a/host.php
+++ b/host.php
@@ -11,8 +11,8 @@ $selected_plugins = !$plugin ? $CONFIG['overview'] : array($plugin);
 
 html_start();
 
-printf("<fieldset id=\"%s\">", $host);
-printf("<legend>%s</legend>", $host);
+printf("<fieldset id=\"%s\">", htmlentities($host));
+printf("<legend>%s</legend>", htmlentities($host));
 
 
 if (!$plugins = collectd_plugins($host)) {