diff --git a/addons/web/static/src/js/views/calendar/calendar_controller.js b/addons/web/static/src/js/views/calendar/calendar_controller.js
index 43afd983fb3..aaed2d82abb 100644
--- a/addons/web/static/src/js/views/calendar/calendar_controller.js
+++ b/addons/web/static/src/js/views/calendar/calendar_controller.js
@@ -398,7 +398,7 @@ var CalendarController = AbstractController.extend({
             res_model: self.modelName,
             res_id: id || null,
             context: event.context || self.context,
-            title: _t("Open: ") + event.data.title,
+            title: _t("Open: ") + _.escape(event.data.title),
             on_saved: function () {
                 if (event.data.on_save) {
                     event.data.on_save();