diff -r edfe43ceaa35 -r bd0126d17e83 web/views/basecomponents.py
--- a/web/views/basecomponents.py	Thu Sep 10 08:13:22 2009 +0200
+++ b/web/views/basecomponents.py	Fri Sep 11 15:57:34 2009 +0200
@@ -149,7 +149,7 @@
         title = self.req.property_value('ui.site-title')
         if title:
             self.w(u'<span id="appliName"><a href="%s">%s</a></span>' % (
-                self.req.base_url(), title))
+                self.req.base_url(), xml_escape(title)))
 
 
 class SeeAlsoVComponent(component.RelatedObjectsVComponent):