diff --git a/static/js/filter.js b/static/js/filter.js
index 6b8407c..b04100f 100644
--- a/static/js/filter.js
+++ b/static/js/filter.js
@@ -13,6 +13,7 @@ oml.ui.filter = function(id) {
                 : false,
             columns: [
                 {
+                    format: Ox.encodeHTMLEntities,
                     id: 'name',
                     operator: '+',
                     title: Ox._(filter.title),
diff --git a/static/js/listDialog.js b/static/js/listDialog.js
index a47c008..19aa945 100644
--- a/static/js/listDialog.js
+++ b/static/js/listDialog.js
@@ -43,7 +43,7 @@ oml.ui.listDialog = function() {
             closeButton: true,
             content: Ox.LoadingScreen().start(),
             height: 264,
-            title: getTitle(list),
+            title: Ox.encodeHTMLEntities(getTitle(list)),
             width: 648 + Ox.UI.SCROLLBAR_SIZE
         });