diff --git a/app/index.php b/app/index.php
index add697c..ea5357c 100644
--- a/app/index.php
+++ b/app/index.php
@@ -14,7 +14,7 @@ if (isset($_GET["name"]))
 {
     $name = $_GET["name"];
 ?>
-    <div>Hey <?= $name ?>, how are you doing?</div>
+    <div>Hey <?= htmlspecialchars($name) ?>, how are you doing?</div>
     <div>Enjoy this picture:</div>
     <div><img src="//unsplash.it/256"></div>
     <hr>