diff --git a/openerp/http.py b/openerp/http.py
index 73fd66fc087..5d85de44460 100644
--- a/openerp/http.py
+++ b/openerp/http.py
@@ -159,6 +159,7 @@ def redirect_with_hash(url, code=303):
     # See extensive test page at http://greenbytes.de/tech/tc/httpredirects/
     if request.httprequest.user_agent.browser in ('firefox',):
         return werkzeug.utils.redirect(url, code)
+    url = url.replace("'", "%27").replace("<", "%3C")
     return "<html><head><script>window.location = '%s' + location.hash;</script></head></html>" % url
 
 class WebRequest(object):