diff --git a/lib/util.php b/lib/util.php
index dcdb921d60..13ce180b4e 100644
--- a/lib/util.php
+++ b/lib/util.php
@@ -676,7 +676,7 @@ function common_render_content($text, $notice) {
}
function common_tag_link($tag) {
- return '' . $tag . '';
+ return '' . htmlspecialchars($tag) . '';
}
function common_at_link($sender_id, $nickname) {