diff --git a/src/root/runcommand-log.tt b/src/root/runcommand-log.tt
index 7d346823..b937a373 100644
--- a/src/root/runcommand-log.tt
+++ b/src/root/runcommand-log.tt
@@ -11,7 +11,7 @@
   [% ELSE %]
   is
   [% END %]
-  the output of a RunCommand execution of the command <tt>[% runcommandlog.command %]</tt>
+  the output of a RunCommand execution of the command <tt>[% HTML.escape(runcommandlog.command) %]</tt>
   on <a href="[% c.uri_for('/build', build.id) %]">Build [% build.id %]</a>.
   [% IF tail %]
   The <a href="[% c.uri_for('/build', build.id, 'runcommandlog', runcommandlog.uuid) %]">full log</a> is also available.