--- a/web/views/idownloadable.py	Sun Nov 01 21:40:03 2009 +0100
+++ b/web/views/idownloadable.py	Mon Nov 02 16:10:03 2009 +0100
@@ -113,7 +113,7 @@
             except TransformError:
                 pass
             except Exception, ex:
-                msg = self.req._("can't display data, unexpected error: %s") % ex
+                msg = self.req._("can't display data, unexpected error: %s") % xml_escape(str(ex))
                 self.w('<div class="error">%s</div>' % msg)
         self.w(u'</div>')