--- modules/proxy/proxy_ftp.c	2008/08/05 19:01:50	682870
+++ modules/proxy/proxy_ftp.c	2008/08/05 19:03:38	682871
@@ -382,6 +382,7 @@
                                                            c->bucket_alloc));
         }
         if (wildcard != NULL) {
+            wildcard = ap_escape_html(p, wildcard);
             APR_BRIGADE_INSERT_TAIL(out, apr_bucket_pool_create(wildcard,
                                                            strlen(wildcard), p,
                                                            c->bucket_alloc));

