diff --git a/source/Ox/js/HTML.js b/source/Ox/js/HTML.js
index 2c573e15..90330e03 100644
--- a/source/Ox/js/HTML.js
+++ b/source/Ox/js/HTML.js
@@ -434,6 +434,8 @@
         '<a href="mailto:foo@bar.com">foo</a>'
         > Ox.sanitizeHTML('<a href="http://foo.com">foo</a>')
         '<a href="http://foo.com">foo</a>'
+        > Ox.sanitizeHTML('<a href="http://www.foo.com/">http://www.foo.com/</a>')
+        '<a href="http://www.foo.com/">http://www.foo.com/</a>'
         > Ox.sanitizeHTML('<a href="http://foo.com" onclick="alert()">foo</a>')
         '<a href="http://foo.com">foo</a>'
         > Ox.sanitizeHTML('<a href="javascript:alert()">foo</a>')
@@ -474,10 +476,11 @@
                 });
             });
         });
-        html = Ox.addLinks(Ox.encodeHTMLEntities(html), true);
+        html = Ox.encodeHTMLEntities(html);
         matches.forEach(function(match, i) {
             html = html.replace(new RegExp(salt.join(i)), match);
         });
+        html = Ox.addLinks(html, true);
         html = html.replace(/\n\n/g, '<br/><br/>');
         // Close extra opening and remove extra closing tags.
         // Note: this converts '&apos;' to "'" and '&quot;' to '"'