1 files changed, 12 insertions, 3 deletions
diff --git a/views/default/output/text.php b/views/default/output/text.php
index 79048485c..5cbfc35b0 100644
--- a/views/default/output/text.php
+++ b/views/default/output/text.php
@@ -1,3 +1,12 @@
-<?php
-    echo $vars['value'];
-?>
-\ No newline at end of file
+<?php
+/**
+ * Elgg text output
+ * Displays some text that was input using a standard text field
+ *
+ * @package Elgg
+ * @subpackage Core
+ *
+ * @uses $vars['value'] The text to display
+ */
+
+echo htmlspecialchars($vars['value'], ENT_QUOTES, 'UTF-8', false);
+\ No newline at end of file