diff --git a/config/plugins/visualizations/charts/templates/charts.mako b/config/plugins/visualizations/charts/templates/charts.mako
index a65ede31819..7bdaa6c0140 100644
--- a/config/plugins/visualizations/charts/templates/charts.mako
+++ b/config/plugins/visualizations/charts/templates/charts.mako
@@ -8,7 +8,7 @@
- ${hda.name} | ${visualization_name}
+ ${hda.name | h} | ${visualization_name}
${h.js( 'libs/jquery/jquery',
'libs/jquery/jquery-ui',
'libs/jquery/select2',
diff --git a/config/plugins/visualizations/csg/templates/csg.mako b/config/plugins/visualizations/csg/templates/csg.mako
index d986a7f4b6a..9320a0f7130 100644
--- a/config/plugins/visualizations/csg/templates/csg.mako
+++ b/config/plugins/visualizations/csg/templates/csg.mako
@@ -7,7 +7,7 @@
- ${hda.name} | ${visualization_name}
+ ${hda.name | h} | ${visualization_name}
${h.javascript_link( app_root + 'dat.gui.min.js' )}
${h.javascript_link( app_root + 'three.min.js' )}
${h.javascript_link( app_root + 'Detector.js' )}
diff --git a/config/plugins/visualizations/graphviz/templates/graphviz.mako b/config/plugins/visualizations/graphviz/templates/graphviz.mako
index 6f6d689eb43..17cb63a86d4 100644
--- a/config/plugins/visualizations/graphviz/templates/graphviz.mako
+++ b/config/plugins/visualizations/graphviz/templates/graphviz.mako
@@ -5,7 +5,7 @@
- ${hda.name} | ${visualization_name}
+ ${hda.name | h} | ${visualization_name}
<%
root = h.url_for( '/' )
%>
diff --git a/config/plugins/visualizations/scatterplot/templates/scatterplot.mako b/config/plugins/visualizations/scatterplot/templates/scatterplot.mako
index 036ffc19037..e8a5bcabecd 100644
--- a/config/plugins/visualizations/scatterplot/templates/scatterplot.mako
+++ b/config/plugins/visualizations/scatterplot/templates/scatterplot.mako
@@ -16,7 +16,7 @@
-${title or default_title} | ${visualization_display_name}
+${title or default_title | h} | ${visualization_display_name}
## ----------------------------------------------------------------------------
${h.css( 'base', 'jquery-ui/smoothness/jquery-ui')}