diff --git a/app/assets/javascripts/player/terminal_view.js.coffee b/app/assets/javascripts/player/terminal_view.js.coffee
index d03cbe6..69e7599 100644
--- a/app/assets/javascripts/player/terminal_view.js.coffee
+++ b/app/assets/javascripts/player/terminal_view.js.coffee
@@ -46,6 +46,8 @@ class AsciiIo.TerminalView extends Backbone.View
       if d
         [char, brush] = d
 
+        char = char.replace('&', '&amp;').replace('<', '&lt;')
+
         if brush != prevBrush or i is cursorX or i is (cursorX + 1)
           if prevBrush
             html += '</span>'