diff --git a/search_rules.php b/search_rules.php
index 7ec39ace5..672e873cf 100644
--- a/search_rules.php
+++ b/search_rules.php
@@ -61,7 +61,7 @@ $search = get_search_array($_GET['search_id']);
 
 if (isset($search['q']))
 {
-  $template->append( 'search_words', $search['q'] );
+  $template->append( 'search_words', htmlspecialchars($search['q']) );
 }
 else
 {