diff --git a/templates/default/includes/header.php b/templates/default/includes/header.php
index <HASH>..<HASH> 100644
--- a/templates/default/includes/header.php
+++ b/templates/default/includes/header.php
@@ -64,7 +64,7 @@ foreach ($languages AS $lang => $current) {
 	if ($current) {
 		echo $langnames[$lang] . ' | ';
 	} else {
-		echo '<a href="' . SimpleSAML_Utilities::addURLparameter(SimpleSAML_Utilities::selfURL(), 'language=' . $lang) . '">' . 
+		echo '<a href="' . htmlspecialchars(SimpleSAML_Utilities::addURLparameter(SimpleSAML_Utilities::selfURL(), 'language=' . $lang)) . '">' . 
 			$langnames[$lang] . '</a> | ';
 	}
 }
Add html entities to language link in header.