diff --git a/templates/js_tpl.php b/templates/js_tpl.php
index 3d3f22c6..67b41e24 100644
--- a/templates/js_tpl.php
+++ b/templates/js_tpl.php
@@ -33,7 +33,7 @@
 				</p>
 				<div class="bookmark_form_tags"><ul>
 					<& for ( var i = 0; i < tags.length; i++ ) { &>
-						<li><&=tags[i]&></li>
+						<li><&= escapeHTML(tags[i]) &></li>
 					<& } &>
 				</ul></div>
 				<p class="bookmark_form_desc">