diff --git a/src/init.php b/src/init.php
index 09a8339..fd2f526 100644
--- a/src/init.php
+++ b/src/init.php
@@ -235,7 +235,7 @@ function formatTime($format, $timestamp=0) : string
 
 function _e($s)
 {
-    echo Lang::instance()->get($s);
+    echo htmlspecialchars(Lang::instance()->get($s));
 }
 
 function __($s)