diff --git a/templates/user/login.tpl b/templates/user/login.tpl
index dc01dcd..91e21b6 100644
--- a/templates/user/login.tpl
+++ b/templates/user/login.tpl
@@ -38,7 +38,7 @@
 	<form id="signinForm" name="login" method="post" action="{$loginUrl}">
 {/if}
 
-<input type="hidden" name="source" value="{$source|escape}" />
+<input type="hidden" name="source" value="{$source|strip_unsafe_html|escape}" />
 
 {if ! $implicitAuth}
 	<table id="signinTable" class="data">