diff --git a/transformation_wrapper.php b/transformation_wrapper.php
index 25bc61bc7ca4..769bca208ac8 100644
--- a/transformation_wrapper.php
+++ b/transformation_wrapper.php
@@ -112,7 +112,11 @@
 PMA_downloadHeader($cn, $mime_type);
 
 if (! isset($resize)) {
-    echo $row[$transform_key];
+    if (stripos($mime_type, 'html') === false) {
+        echo $row[$transform_key];
+    } else {
+        echo htmlspecialchars($row[$transform_key]);
+    }
 } else {
     // if image_*__inline.inc.php finds that we can resize,
     // it sets $resize to jpeg or png