diff --git a/lib/get-branch.php b/lib/get-branch.php
index 7f9ab94..e732f62 100644
--- a/lib/get-branch.php
+++ b/lib/get-branch.php
@@ -373,7 +373,7 @@ if (!isset($ftpSite) && $_SESSION['githubDiff']) {
 }
 ?>
 	<script>
-	targetElem = top.ICEcoder.filesFrame.contentWindow.document.getElementById('<?php echo $_GET['location'];?>');
+	targetElem = top.ICEcoder.filesFrame.contentWindow.document.getElementById('<?php echo xssClean($_GET['location'],"html");?>');
 	newUL = document.createElement("ul");
 	newUL.style = "display: block";
 	locNest = targetElem.parentNode.parentNode;