diff --git a/app/assets/javascripts/discourse/components/poster-name.js.es6 b/app/assets/javascripts/discourse/components/poster-name.js.es6 index ebeaacc3454..583a423b726 100644 --- a/app/assets/javascripts/discourse/components/poster-name.js.es6 +++ b/app/assets/javascripts/discourse/components/poster-name.js.es6 @@ -37,6 +37,7 @@ var PosterNameComponent = Em.Component.extend({ var title = post.get('user_title'); if (!Em.isEmpty(title)) { + title = Handlebars.Utils.escapeExpression(title); buffer.push(''); if (Em.isEmpty(primaryGroupName)) { buffer.push(title);