Better alt handling

index.php

@@ -731,7 +731,7 @@ HTML;
 
 							if ( "image" == $mediaType ) {
 								//	Get the alt text
-								isset( $attachment["name"] ) ? $alt = $attachment["name"] : $alt = "";
+								isset( $attachment["name"] ) ? $alt = htmlspecialchars( $attachment["name"] ) : $alt = "";
 								$content .= "<img src='{$mediaURl}' alt='{$alt}'>";
 							} else if ( "video" == $mediaType ) {
 								$content .= "<video controls><source src='{$mediaURl}' type='{$mime}'></video>";