--- a/pidgin/gtkimhtml.c Sun Jan 27 18:13:17 2013 +0200 +++ b/pidgin/gtkimhtml.c Sun Jan 27 17:26:36 2013 -0500 @@ -5109,8 +5109,10 @@ } else if (strncmp(name, "LINK ", 5) == 0) { char *tmp = g_object_get_data(G_OBJECT(tag), "link_url"); if (tmp) { - g_snprintf(buf, sizeof(buf), "<a href=\"%s\">", tmp); + gchar *escaped = purple_markup_escape_text(tmp, -1); + g_snprintf(buf, sizeof(buf), "<a href=\"%s\">", escaped); buf[sizeof(buf)-1] = '\0'; + g_free(escaped); return buf; } else { return "";