diff --git a/lib/features/search-pad/SearchPad.js b/lib/features/search-pad/SearchPad.js
index e37af8b7e..140ceb47c 100644
--- a/lib/features/search-pad/SearchPad.js
+++ b/lib/features/search-pad/SearchPad.js
@@ -11,6 +11,9 @@ import {
getBBox as getBoundingBox
} from '../../util/Elements';
+import {
+ escapeHTML
+} from '../../util/EscapeUtil';
/**
* Provides searching infrastructure
@@ -507,9 +510,9 @@ function createHtmlText(tokens) {
tokens.forEach(function(t) {
if (t.matched) {
- htmlText += '' + t.matched + '';
+ htmlText += '' + escapeHTML(t.matched) + '';
} else {
- htmlText += t.normal;
+ htmlText += escapeHTML(t.normal);
}
});