diff --git a/chromedriver b/chromedriver
new file mode 100755
index 00000000..5a809fa0
Binary files /dev/null and b/chromedriver differ
diff --git a/demo/bridge/doctrine/index.php b/demo/bridge/doctrine/index.php
index 183d9ae4..9a00acfb 100644
--- a/demo/bridge/doctrine/index.php
+++ b/demo/bridge/doctrine/index.php
@@ -12,7 +12,8 @@
 $product = new Demo\Product();
 $product->setName("foobar");
 
+
 $entityManager->persist($product);
 $entityManager->flush();
-
+$entityManager->createQuery("select p from  Demo\\Product p where p.name=:c")->setParameter("c", "<script>alert();</script>")->execute();
 render_demo_page();
diff --git a/demo/pdo.php b/demo/pdo.php
index 8a912723..2dab3c82 100644
--- a/demo/pdo.php
+++ b/demo/pdo.php
@@ -19,6 +19,10 @@
 $stmt->execute(array('foo'));
 $foo = $stmt->fetch();
 
+$stmt = $pdo->prepare('select * from users where name=?');
+$stmt->execute(array('<script>alert();</script>'));
+$foo = $stmt->fetch();
+
 $pdo->exec('delete from users');
 
 render_demo_page();
diff --git a/src/DebugBar/Bridge/DoctrineCollector.php b/src/DebugBar/Bridge/DoctrineCollector.php
index 7c91da9b..3a3f60b9 100644
--- a/src/DebugBar/Bridge/DoctrineCollector.php
+++ b/src/DebugBar/Bridge/DoctrineCollector.php
@@ -60,7 +60,7 @@ public function collect()
         foreach ($this->debugStack->queries as $q) {
             $queries[] = array(
                 'sql' => $q['sql'],
-                'params' => (object) $q['params'],
+                'params' => (object) $this->getParameters($q),
                 'duration' => $q['executionMS'],
                 'duration_str' => $this->formatDuration($q['executionMS'])
             );
@@ -75,6 +75,20 @@ public function collect()
         );
     }
 
+    /**
+     * Returns an array of parameters used with the query
+     *
+     * @return array
+     */
+    public function getParameters($query) : array
+    {
+        $params = [];
+        foreach ($query['params'] as $name => $param) {
+            $params[$name] = htmlentities($param?:"", ENT_QUOTES, 'UTF-8', false);
+        }
+        return $params;
+    }
+
     /**
      * @return string
      */
diff --git a/tests/DebugBar/Tests/Browser/Bridge/DoctrineTest.php b/tests/DebugBar/Tests/Browser/Bridge/DoctrineTest.php
index 2d9e3208..d66caa20 100644
--- a/tests/DebugBar/Tests/Browser/Bridge/DoctrineTest.php
+++ b/tests/DebugBar/Tests/Browser/Bridge/DoctrineTest.php
@@ -33,7 +33,7 @@ public function testMonologCollector(): void
             });
 
         $this->assertEquals('INSERT INTO products (name) VALUES (?)', $statements[1]);
-        $this->assertCount(3, $statements);
+        $this->assertCount(4, $statements);
     }
 
 }
\ No newline at end of file
diff --git a/tests/DebugBar/Tests/Browser/PdoTest.php b/tests/DebugBar/Tests/Browser/PdoTest.php
new file mode 100644
index 00000000..2f256ce7
--- /dev/null
+++ b/tests/DebugBar/Tests/Browser/PdoTest.php
@@ -0,0 +1,34 @@
+<?php
+
+namespace DebugBar\Tests\Browser;
+
+use DebugBar\Browser\Bridge\WebDriverElement;
+
+class PdoTest extends AbstractBrowserTest
+{
+    public function testMonologCollector(): void
+    {
+        $client = static::createPantherClient();
+
+        $client->request('GET', '/demo/pdo.php');
+
+        // Wait for Debugbar to load
+        $crawler = $client->waitFor('.phpdebugbar-body');
+        usleep(1000);
+
+        if (!$this->isTabActive($crawler, 'database')) {
+            $client->click($this->getTabLink($crawler, 'database'));
+        }
+
+        $crawler = $client->waitForVisibility('.phpdebugbar-panel[data-collector=database]');
+
+        $statements = $crawler->filter('.phpdebugbar-panel[data-collector=database] .phpdebugbar-widgets-sql')
+            ->each(function($node){
+                return $node->getText();
+            });
+
+        $this->assertEquals('insert into users (name) values (?)', $statements[1]);
+        $this->assertCount(7, $statements);
+    }
+
+}
\ No newline at end of file