diff --git a/index.php b/index.php
index 181bdcc..66938c3 100644
--- a/index.php
+++ b/index.php
@@ -484,13 +484,13 @@
 				if (slides.length > 1) {
 					var prev = document.createElement('button');
 					prev.type = 'button'; prev.className = 'carousel-arrow carousel-prev';
-					prev.innerHTML = '‹';
+					prev.textContent = '‹';
 					prev.addEventListener('click', function () { goTo(current - 1); });
 					car.appendChild(prev);
 
 					var next = document.createElement('button');
 					next.type = 'button'; next.className = 'carousel-arrow carousel-next';
-					next.innerHTML = '›';
+					next.textContent = '›';
 					next.addEventListener('click', function () { goTo(current + 1); });
 					car.appendChild(next);
 
@@ -536,14 +536,14 @@
 			var prevBtn = document.createElement('button');
 			prevBtn.type = 'button';
 			prevBtn.className = 'lightbox-arrow lightbox-prev';
-			prevBtn.innerHTML = '‹';
+			prevBtn.textContent = '‹'; // ‹
 
 			var zoomed = document.createElement('img');
 
 			var nextBtn = document.createElement('button');
 			nextBtn.type = 'button';
 			nextBtn.className = 'lightbox-arrow lightbox-next';
-			nextBtn.innerHTML = '›';
+			nextBtn.textContent = '›'; // ›
 
 			overlay.appendChild(prevBtn);
 			overlay.appendChild(zoomed);
diff --git a/php/page.php b/php/page.php
index 8bc3c31..147ed62 100644
--- a/php/page.php
+++ b/php/page.php
@@ -7,7 +7,7 @@
 	<!-- Cover image -->
 	<?php if ($page->coverImage()): ?>
 	<div class="cover-image-wrapper">
-		<img class="card-img-top" alt="<?php echo $page->title(); ?>" src="<?php echo $page->coverImage(); ?>"/>
+		<img class="card-img-top" alt="<?php echo htmlspecialchars($page->title()); ?>" src="<?php echo $page->coverImage(); ?>"/>
 	</div>
 	<?php endif ?>