diff --git a/templates/user/login.tpl b/templates/user/login.tpl
index 383ac48..a8fd82e 100644
--- a/templates/user/login.tpl
+++ b/templates/user/login.tpl
@@ -37,7 +37,7 @@
 	<br />
 {/if}
 
-<input type="hidden" name="source" value="{$source|escape}" />
+<input type="hidden" name="source" value="{$source|strip_unsafe_html|escape}" />
 
 {if ! $implicitAuth}
 	<table id="signinTable" class="data">