diff --git a/testssl.sh b/testssl.sh
index ed390bc..2d2bcae 100755
--- a/testssl.sh
+++ b/testssl.sh
@@ -1953,7 +1953,9 @@ emphasize_stuff_in_headers(){
           -e "s/X-AspNet-Version/${yellow}X-AspNet-Version${off}/g"
 
      if "$do_html"; then
-          html_out "$(tm_out "$1" | sed -e "s/\([0-9]\)/${html_brown}\1${html_off}/g" \
+          html_out "$(tm_out "$1" | sed -e 's/\&/\&/g' \
+               -e 's/</\&lt;/g' -e 's/>/\&gt;/g' -e 's/"/\&quot;/g' -e "s/'/\&apos;/g" \
+               -e "s/\([0-9]\)/${html_brown}\1${html_off}/g" \
                -e "s/Debian/${html_yellow}\Debian${html_off}/g" \
                -e "s/Win32/${html_yellow}\Win32${html_off}/g" \
                -e "s/Win64/${html_yellow}\Win64${html_off}/g" \