diff --git a/inc/parser/xhtml.php b/inc/parser/xhtml.php
index b4ca85b6793cfeca73dba5edd0fc6ec7e7e604e6..28d757866178df0195063c9d8a41341a0231f5bc 100644
--- a/inc/parser/xhtml.php
+++ b/inc/parser/xhtml.php
@@ -1838,9 +1838,9 @@ class Doku_Renderer_xhtml extends Doku_Renderer {
 
         // output each track if any
         foreach( $tracks as $trackid => $info ) {
-            list( $kind, $srclang ) = $info;
-            $out .= "<track kind=$kind srclang=$srclang ";
-            $out .= "label=$srclang ";
+            list( $kind, $srclang ) = array_map( 'hsc', $info );
+            $out .= "<track kind=\"$kind\" srclang=\"$srclang\" ";
+            $out .= "label=\"$srclang\" ";
             $out .= 'src="'.ml($trackid, '', true).'">'.NL;
         }