diff --git a/mod/hotpot/mod.html b/mod/hotpot/mod.html
index b4507e56d92..26b461b1b2f 100644
--- a/mod/hotpot/mod.html
+++ b/mod/hotpot/mod.html
@@ -33,7 +33,7 @@ $text_source_options = array(
 				print '<input type="hidden" name="namesource" value="'.HOTPOT_TEXTSOURCE_SPECIFIC.'">';
 			}
 			print '<span id="nameSPAN">';
-			print '<input type="text" name="name" size=40 value="'.$form->name.'">';
+            print '<input type="text" name="name" size="40" value="'.htmlspecialchars($form->name).'" />';
 			print '</span>';
 		?></td>
 	</tr>