diff --git a/HttpServer/Http/Formatter/XmlFormatter.php b/HttpServer/Http/Formatter/XmlFormatter.php
index 2dfa6e58..99c31344 100644
--- a/HttpServer/Http/Formatter/XmlFormatter.php
+++ b/HttpServer/Http/Formatter/XmlFormatter.php
@@ -75,7 +75,7 @@ class XmlFormatter extends Application implements IFormatter
 				$node = $dom->addChild($key);
 				$this->toXml($node, $val);
 			} else {
-				$dom->addChild($key, $val);
+				$dom->addChild($key, htmlspecialchars((string)$val));
 			}
 		}
 	}