diff --git a/pytm/pytm.py b/pytm/pytm.py
index a7116878..545704fa 100644
--- a/pytm/pytm.py
+++ b/pytm/pytm.py
@@ -1496,7 +1496,7 @@ def display_name(self):
         return self.name
 
     def _label(self):
-        return "\\n".join(wrap(self.display_name(), 18))
+        return "\\n".join(wrap(html.escape(self.display_name()), 18))
 
     def _shape(self):
         return "square"