diff --git a/addons/payment_ogone/controllers/main.py b/addons/payment_ogone/controllers/main.py
index 11cc2a60a0c..c24e52d220d 100644
--- a/addons/payment_ogone/controllers/main.py
+++ b/addons/payment_ogone/controllers/main.py
@@ -5,6 +5,7 @@ import logging
 import pprint
 import re
 
+import markupsafe
 import werkzeug
 
 from odoo import _, http
@@ -88,7 +89,7 @@ class OgoneController(http.Controller):
             # The content of the HTML is not sanitized to preserve the redirection in the script.
             # After redirection, the customer comes back to the directlink return URL and we proceed
             # with the (now authenticated) payment request.
-            redirect_html = ustr(base64.b64decode(redirect_html_element.text))
+            redirect_html = markupsafe.Markup(ustr(base64.b64decode(redirect_html_element.text)))
             return request.render(
                 'payment_ogone.directlink_feedback', {'redirect_html': redirect_html}
             )
diff --git a/addons/payment_ogone/views/payment_ogone_templates.xml b/addons/payment_ogone/views/payment_ogone_templates.xml
index 6fb278c0554..74a6eb2a96b 100644
--- a/addons/payment_ogone/views/payment_ogone_templates.xml
+++ b/addons/payment_ogone/views/payment_ogone_templates.xml
@@ -43,7 +43,7 @@
     <template id="directlink_feedback" name="Payment processing page">
         <t t-call="web.layout">
             <t t-call-assets="web.assets_common"/>
-            <t t-raw="redirect_html"/>
+            <t t-out="redirect_html"/>
         </t>
     </template>