             x = @settings.tooltipXFormatter(item.datapoint[0])
             y = @settings.tooltipYFormatter(item.datapoint[1])
 
-            @tooltip.show("<b>" + item.series.label + "</b><span class='chart-y'>" + y + "</span><span class='chart-x'>" + x + "</span>", [item.pageX, item.pageY])
+            @tooltip.show("<b>" + @htmlEscaper.escape(item.series.label) + "</b><span class='chart-y'>" + @htmlEscaper.escape(y) + "</span><span class='chart-x'>" + @htmlEscaper.escape(x) + "</span>", [item.pageX, item.pageY])
 
         else
           @tooltip.hide()

define(
  ['lib/DateFormat'
   'neo4j/webadmin/ui/Tooltip'
   'lib/jquery.flot','lib/backbone']
  (DateFormat, Tooltip) ->
    class LineChart
      
      timezoneOffset = (new Date()).getTimezoneOffset()  * 60 * 1000

      constructor : (el) ->
        @el = $(el)
        @settings = @defaultSettings
        
        @htmlEscaper = new HtmlEscaper

        @tooltip = new Tooltip({ closeButton : false })
        
