diff --git a/portal/patient/scripts/app/patientdata.js b/portal/patient/scripts/app/patientdata.js
index 7fb2ab0ae3c..43143351410 100644
--- a/portal/patient/scripts/app/patientdata.js
+++ b/portal/patient/scripts/app/patientdata.js
@@ -128,7 +128,7 @@ var page = {
                                     value = 'Unassigned';
                                 }
                                 $('#' + key + 'InputContainer span.help-inline').html(
-                                '<a class="editval text-primary" onclick="page.toggleVal(this); return false;" data-tstate=new data-id="'+key+'">'+value+'</a>');
+                                '<a class="editval text-primary" onclick="page.toggleVal(this); return false;" data-tstate=new data-id="' + _.escape(key) + '">' + _.escape(value) + '</a>');
                                 $('#' + key + 'InputContainer span.help-inline').show();
                             }
                         });