diff --git a/application/views/admin/super/header.php b/application/views/admin/super/header.php
index 9b2f8d4c06a..24139b53a2a 100644
--- a/application/views/admin/super/header.php
+++ b/application/views/admin/super/header.php
@@ -5,7 +5,7 @@
  */
 ?>
 <!DOCTYPE html>
-<html lang="<?php echo str_replace('-informal','',$adminlang); ?>"<?php echo $languageRTL;?> >
+<html lang="<?php echo str_replace('-informal','', htmlspecialchars($adminlang)); ?>"<?php echo $languageRTL;?> >
 <head>
     <meta http-equiv="content-type" content="text/html; charset=UTF-8" />
     <meta http-equiv="X-UA-Compatible" content="IE=edge" />
