diff --git a/kernel/model/box.go b/kernel/model/box.go
index 8c54414a3..d54912ad3 100644
--- a/kernel/model/box.go
+++ b/kernel/model/box.go
@@ -398,7 +398,7 @@ type BoxInfo struct {
 func (box *Box) GetInfo() (ret *BoxInfo) {
 	ret = &BoxInfo{
 		ID:   box.ID,
-		Name: box.Name,
+		Name: util.EscapeHTML(box.Name),
 	}
 
 	fileInfos := box.ListFiles("/")