diff --git a/ui/ui/customer/change-password.tpl b/ui/ui/customer/change-password.tpl
index cadf429f..fc54a012 100644
--- a/ui/ui/customer/change-password.tpl
+++ b/ui/ui/customer/change-password.tpl
@@ -8,7 +8,7 @@
             <div class="panel-body">
                 <form class="form-horizontal" method="post" role="form"
                     action="{Text::url('accounts/change-password-post')}">
-                    <input type="hidden" name="csrf_token" value="{$csrf_token}">
+                    <input type="hidden" name="csrf_token" value="{$csrf_token|escape:'html'}">
                     <div class="form-group">
                         <label class="col-md-2 control-label">{Lang::T('Current Password')}</label>
                         <div class="col-md-6">
@@ -35,10 +35,9 @@
                         </div>
                     </div>
                 </form>
-
             </div>
         </div>
     </div>
 </div>
 
-{include file="customer/footer.tpl"}
\ No newline at end of file
+{include file="customer/footer.tpl"}