diff --git a/js/DomainStatistics.js b/js/DomainStatistics.js
index 8e2e215..d2121ea 100644
--- a/js/DomainStatistics.js
+++ b/js/DomainStatistics.js
@@ -50,7 +50,7 @@ Ext.define('PMG.DomainStatistics', {
 	})
 
 	var render_domain = function(v) {
-	    return v === '' ? '--- EMPTY ADDRESS ---' : v;
+	    return v === '' ? '--- EMPTY ADDRESS ---' : Ext.htmlEncode(v);
 	};
 
 	me.items = {
diff --git a/js/QuarantineList.js b/js/QuarantineList.js
index 41cbaae..0f83904 100644
--- a/js/QuarantineList.js
+++ b/js/QuarantineList.js
@@ -195,7 +195,13 @@ Ext.define('PMG.QuarantineList', {
 		    proxy: {
 			type: 'proxmox',
 			url: '/api2/json/quarantine/spamusers'
-		    }
+		    },
+		    fields: [
+			{
+			    name: 'mail',
+			    renderer: Ext.htmlEncode
+			}
+		    ]
 		},
 		queryParam: false,
 		queryCaching: false,
diff --git a/js/UserBlackWhiteList.js b/js/UserBlackWhiteList.js
index bff10f5..2f724ec 100644
--- a/js/UserBlackWhiteList.js
+++ b/js/UserBlackWhiteList.js
@@ -111,7 +111,13 @@ Ext.define('PMG.UserBlackWhiteList', {
 		proxy: {
 		    type: 'proxmox',
 		    url: '/api2/json/quarantine/quarusers'
-		}
+		},
+		fields: [
+		    {
+			name: 'mail',
+			renderer: Ext.htmlEncode
+		    }
+		]
 	    },
 	    queryParam: false,
 	    queryCaching: false,