diff --git a/www/make_subset.php b/www/make_subset.php
index 377169b..812cb5e 100644
--- a/www/make_subset.php
+++ b/www/make_subset.php
@@ -61,7 +61,7 @@
   <link rel="stylesheet" href="css/style.css" />
 </head>
 <body>
-  <h1><?php echo $name; ?></h1>
+  <h1><?php echo htmlentities($name); ?></h1>
   <form name="make-subset" method="post" action="?fontfile=<?php echo $fontfile; ?>">
     <label>
       Insert the text from which you want the glyphs in the subsetted font: <br />
