diff --git a/templates/user/login.tpl b/templates/user/login.tpl
index 083534b..9ceda56 100644
--- a/templates/user/login.tpl
+++ b/templates/user/login.tpl
@@ -53,7 +53,7 @@
 	<br />
 {/if}
 
-<input type="hidden" name="source" value="{$source|escape}" />
+<input type="hidden" name="source" value="{$source|strip_unsafe_html|escape}" />
 
 {if ! $implicitAuth}
 	{fbvFormArea id="loginFields"}