diff --git a/src/usr/local/www/services_acb.php b/src/usr/local/www/services_acb.php
index 51beff6056..ad7c64b7d9 100644
--- a/src/usr/local/www/services_acb.php
+++ b/src/usr/local/www/services_acb.php
@@ -371,7 +371,7 @@ if ($_REQUEST['download']) {
 $tab_array[1] = array("Restore", $active, "/services_acb.php");
 
 if ($_REQUEST['download']) {
-	$tab_array[] = array("Revision", true, "/services_acb.php?download={$_REQUEST['download']}");
+	$tab_array[] = array("Revision", true, "/services_acb.php?download=" . htmlspecialchars($_REQUEST['download']));
 }
 
 $tab_array[] = array("Backup now", false, "/services_acb_backup.php");