diff --git a/modules/profile.module b/modules/profile.module
index 63c9eda8e2b577266444dd5639fd112b9b5ccb9a..1123ba4c7a4845774a0e8593df373de950ab7523 100644
--- a/modules/profile.module
+++ b/modules/profile.module
@@ -190,7 +190,7 @@ function _profile_user_view(&$user, $mode) {
         case "textfield":
         case "textarea":
         case "checkbox":
-          $value = ($t == "profile_homepage") ? "<a href=\"". check_output($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t);
+          $value = ($t == "profile_homepage") ? "<a href=\"". drupal_specialchars($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t);
           $output .= form_item($field[1], $value);
           break;
         case "select":
diff --git a/modules/profile/profile.module b/modules/profile/profile.module
index 63c9eda8e2b577266444dd5639fd112b9b5ccb9a..1123ba4c7a4845774a0e8593df373de950ab7523 100644
--- a/modules/profile/profile.module
+++ b/modules/profile/profile.module
@@ -190,7 +190,7 @@ function _profile_user_view(&$user, $mode) {
         case "textfield":
         case "textarea":
         case "checkbox":
-          $value = ($t == "profile_homepage") ? "<a href=\"". check_output($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t);
+          $value = ($t == "profile_homepage") ? "<a href=\"". drupal_specialchars($user->$t) ."\">". check_output($user->$t) ."</a>" : check_output($user->$t);
           $output .= form_item($field[1], $value);
           break;
         case "select":