diff --git a/src/XrdHttp/XrdHttpReq.cc b/src/XrdHttp/XrdHttpReq.cc
index 72c01e86051..9c753ae59b5 100644
--- a/src/XrdHttp/XrdHttpReq.cc
+++ b/src/XrdHttp/XrdHttpReq.cc
@@ -803,7 +803,11 @@ void XrdHttpReq::appendOpaque(XrdOucString &s, XrdSecEntity *secent, char *hash,
 
       if (secent->vorg) {
         s += "&xrdhttpvorg=";
-        s += secent->vorg;
+        char *s1 = quote(secent->vorg);
+        if (s1) {
+          s += s1;
+          free(s1);
+        }
       }
 
       if (secent->host) {