diff --git a/public/messages.php b/public/messages.php
index e0fb5e3..b9a8760 100644
--- a/public/messages.php
+++ b/public/messages.php
@@ -43,11 +43,11 @@ include 'template/user_menu_button.php';
                                        class="material-icons red-text">fiber_new
                                     </i>
                                 <?php } ?>
-                                <?php echo $message->sender()->username ?>
+                                <?php echo htmlspecialchars($message->sender()->username) ?>
                             </div>
                             <div class="collapsible-body">
                                 <span>
-                                    <?php echo $message->message ?>
+                                    <?php echo htmlspecialchars($message->message) ?>
                                 </span>
                             </div>
                         </li>
@@ -64,11 +64,11 @@ include 'template/user_menu_button.php';
                                 <?php } else { ?>
                                     <i class="material-icons">arrow_forward</i>
                                 <?php } ?>
-                                <?php echo $message->receiver()->username ?>
+                                <?php echo htmlspecialchars($message->receiver()->username) ?>
                             </div>
                             <div class="collapsible-body">
                                 <span>
-                                    <?php echo $message->message ?>
+                                    <?php echo htmlspecialchars($message->message) ?>
                                 </span>
                             </div>
                         </li>