diff --git a/vendor/JSONFormatter.js b/vendor/JSONFormatter.js
index 5a60464..bddf74e 100644
--- a/vendor/JSONFormatter.js
+++ b/vendor/JSONFormatter.js
@@ -98,7 +98,7 @@ JSONFormatter.prototype = {
           dispValue = value.substr(this.options.baseUrl.length);
         }
 
-        output += '<a class="valuelink" href="' + this.jsString(value) + '"><span class="string">&quot;' + prefix + this.jsString(dispValue) + '&quot;</span></a>';
+        output += '<a class="valuelink" href="' + this.htmlEncode(value) + '"><span class="string">&quot;' + prefix + this.jsString(dispValue) + '&quot;</span></a>';
       } else {
         output += '<span class="string">&quot;' + this.jsString(value) + '&quot;</span>';
       }