--- a/Plugins/VcsPlugins/vcsMercurial/HgLogBrowserDialog.py	Sun Sep 24 11:26:51 2017 +0200
+++ b/Plugins/VcsPlugins/vcsMercurial/HgLogBrowserDialog.py	Sun Sep 24 17:15:08 2017 +0200
@@ -1679,7 +1679,8 @@
                 childrenStr = ""
             
             messageStr = "<br />\n".join([
-                line.strip() for line in itm.data(0, self.__messageRole)
+                Utilities.html_encode(line.strip())
+                for line in itm.data(0, self.__messageRole)
             ])
             
             html = self.__detailsTemplate.format(