diff -r b025592ff478 -r 2413e5291e8d web/views/basecomponents.py
--- a/web/views/basecomponents.py	Thu Sep 10 12:23:16 2009 +0200
+++ b/web/views/basecomponents.py	Thu Sep 10 14:17:39 2009 +0200
@@ -148,7 +148,7 @@
         title = self.req.property_value('ui.site-title')
         if title:
             self.w(u'<span id="appliName"><a href="%s">%s</a></span>' % (
-                self.req.base_url(), title))
+                self.req.base_url(), xml_escape(title)))
 
 
 class SeeAlsoVComponent(component.RelatedObjectsVComponent):