diff --git a/libraries/header.inc.php b/libraries/header.inc.php
index 6ce37b82b..dee9b1532 100644
--- a/libraries/header.inc.php
+++ b/libraries/header.inc.php
@@ -121,7 +121,7 @@ if (!$GLOBALS['is_ajax_request']) {
                     printf($item,
                             $GLOBALS['cfg']['DefaultTabDatabase'],
                             PMA_generate_common_url($GLOBALS['db']),
-                            $GLOBALS['db'],
+                            htmlspecialchars($GLOBALS['db']),
                             __('Database'),
                             's_tbl.png');
                     // if the table is being dropped, $_REQUEST['purge'] is set