diff --git a/framework/api/entry.class.php b/framework/api/entry.class.php
index 0b3f15714b..cb421df268 100644
--- a/framework/api/entry.class.php
+++ b/framework/api/entry.class.php
@@ -417,6 +417,7 @@ class baseEntry
      */
     public function setPost($key, $value)
     {
+        if(in_array($key, array('desc', 'spec', 'verify', 'steps'))) $value = htmlspecialchars($value);
         $_POST[$key] = $value;
     }