diff --git a/clite/commands.js b/clite/commands.js
index 12bf348..8a2defe 100644
--- a/clite/commands.js
+++ b/clite/commands.js
@@ -291,7 +291,7 @@ Options:
 			end = lines.length;
 		tty.clear();
 		for (var i=start; i<end; i++) {
-			tty.draw(lines[i]+'\n');
+			tty.draw(stdlib.htmlEncode(lines[i])+'\n');
 		}
 	}