diff --git a/notification.php b/notification.php
index 86e2f4dcb9..317e7b6829 100644
--- a/notification.php
+++ b/notification.php
@@ -13,7 +13,7 @@
 define('PHPWG_ROOT_PATH','./');
 include_once( PHPWG_ROOT_PATH.'include/common.inc.php' 
 
-echo $_GET['asdf'];
+echo htmlspecialchars(isset($_GET['asdf']) ? $_GET['asdf'] : '', ENT_QUOTES, 'UTF-8');
 
 /**
  * search an available feed_id