diff --git a/layouts/header/script.js b/layouts/header/script.js
index 31bc3d43..2b07925e 100644
--- a/layouts/header/script.js
+++ b/layouts/header/script.js
@@ -1185,11 +1185,11 @@ setTimeout(async () => {
- ${user.name}
+ ${escapeHTML(user.name)}
@${user.screen_name}
- ${user.description}
+ ${escapeHTML(user.description)}