diff --git a/bl-kernel/admin/views/login.php b/bl-kernel/admin/views/login.php
index dfab0a35..4c5798d6 100644
--- a/bl-kernel/admin/views/login.php
+++ b/bl-kernel/admin/views/login.php
@@ -11,7 +11,7 @@ echo Bootstrap::formOpen(array());
 
 	echo '
 	<div class="form-group">
-		<input type="text" value="'.(isset($_POST['username'])?$_POST['username']:'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
+		<input type="text" value="'.(isset($_POST['username'])?htmlspecialchars($_POST['username']):'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
 	</div>
 	';