diff --git a/src/vs/base/browser/htmlContentRenderer.ts b/src/vs/base/browser/htmlContentRenderer.ts
index 9af71f672b3..9305281046b 100644
--- a/src/vs/base/browser/htmlContentRenderer.ts
+++ b/src/vs/base/browser/htmlContentRenderer.ts
@@ -7,6 +7,7 @@
 
 import DOM = require('vs/base/browser/dom');
 import {defaultGenerator} from 'vs/base/common/idGenerator';
+import {escape} from 'vs/base/common/strings';
 import {TPromise} from 'vs/base/common/winjs.base';
 import {IHTMLContentElement} from 'vs/base/common/htmlContent';
 import {marked} from 'vs/base/common/marked/marked';
@@ -111,7 +112,7 @@ function _renderHtml(content: IHTMLContentElement, options: RenderOptions = {}):
 					}, err => {
 						// ignore
 					});
-					return `<span data-code="${id}">${code}</span>`;
+					return `<span data-code="${id}">${escape(code)}</span>`;
 				}
 
 				return code;