diff --git a/phpgwapi/inc/class.html.inc.php b/phpgwapi/inc/class.html.inc.php
index d64466a159..31dd57de1d 100644
--- a/phpgwapi/inc/class.html.inc.php
+++ b/phpgwapi/inc/class.html.inc.php
@@ -1061,7 +1061,7 @@ class html
 			$url = self::link($url,$vars);
 		}
 		//echo "<p>html::a_href('".htmlspecialchars($content)."','$url',".print_r($vars,True).") = ".self::link($url,$vars)."</p>";
-		return '<a href="'.$url.'" '.$options.'>'.$content.'</a>';
+		return '<a href="'.htmlspecialchars($url).'" '.$options.'>'.$content.'</a>';
 	}
 
 	/**