diff --git a/SlashBot.py b/SlashBot.py
index 1288707..9a5e931 100644
--- a/SlashBot.py
+++ b/SlashBot.py
@@ -184,6 +184,7 @@ def mention(self, mention_self: bool = False, pure: bool = False) -> str:
                              if (self.username and (not self.uid or self.uid < 0))
                              else f'tg://user?id={self.uid}')
         name = self.name if not mention_self else "自己"
+        name = htmlEscape(name)
         return f'<a href="{mention_deep_link}">{name}</a>' if not pure else name
 
     def __eq__(self, other):