diff --git a/resources/static/pages/js/manage_account.js b/resources/static/pages/js/manage_account.js
index 5582bd36320ec74faeef97df559a29f1113d75c4..e75f0610f0b1ed09b6020e76ebee51f02db15add 100644
--- a/resources/static/pages/js/manage_account.js
+++ b/resources/static/pages/js/manage_account.js
@@ -89,7 +89,7 @@ BrowserID.manageAccount = (function() {
     var template = dom.getInner("#templateUser");
 
     _(emails).each(function(item) {
-      var e = item.address;
+      var e = _.escape(item.address);
       var identity = substitute(template, { email: e });
 
       var idEl = dom.appendTo(identity, list),