diff --git a/application/views/helpers/FormInput.php b/application/views/helpers/FormInput.php
index c35ac16b5..e298c9287 100644
--- a/application/views/helpers/FormInput.php
+++ b/application/views/helpers/FormInput.php
@@ -44,7 +44,7 @@ public function formInput($name, $value = null, $attribs = null)
             unset($attribs['type']);
         }
 
-        $xhtml = '<input type="' . $type . '"'
+        $xhtml = '<input type="' . $this->view->escape($type) . '"'
                 . ' name="' . $this->view->escape($name) . '"'
                 . ($id === '' ? '' : ' id="' . $this->view->escape($id) . '"')
                 . ' value="' . $this->view->escape($value) . '"'