diff --git a/js/client-tournament.js b/js/client-tournament.js
index e895127b8..a9d7e1262 100644
--- a/js/client-tournament.js
+++ b/js/client-tournament.js
@@ -124,7 +124,7 @@
 
 				switch (cmd) {
 					case 'create':
-						this.room.$chat.append("<div class=\"notice tournament-message-create\">A " + BattleFormats[data.shift()].name + " " + data.join('|') + " Tournament has been created.</div>");
+						this.room.$chat.append("<div class=\"notice tournament-message-create\">A " + BattleFormats[data.shift()].name + " " + Tools.escapeHTML(data.join('|')) + " Tournament has been created.</div>");
 						break;
 
 					case 'join':