diff --git a/juitter.module b/juitter.module
index dee19c4..e6da43b 100755
--- a/juitter.module
+++ b/juitter.module
@@ -91,7 +91,11 @@ function juitter_process_settings(&$settings) {
 	$js_settings = array();
 	foreach ($settings as $trend) {
 		$key = 'trend_' . $trend['trend_id'];
-		$js_settings[$key] = unserialize($trend['settings']);
+    $filtered_settings = array();
+    foreach (unserialize($trend['settings']) as $k => $val) {
+      $filtered_settings[$k] = check_plain($val);
+    }
+    $js_settings[$key] = $filtered_settings;
 		if($js_settings[$key]['imgName'] != '') $js_settings[$key]['loadMSG'] = 'image/gif';
 	}
 	if (variable_get('juitter_search', 1)) {
@@ -155,7 +159,7 @@ function theme_juitter_tabs($trends) {
 			if ($i == 1) { $class .= ' first active'; }
 			if ($i == $num_trends) { $class .= ' last';	}
 			$output .= '<li class="' . $class .'">';
-			$output .= "<a href=\"{$link['href']}\" id=\"{$link['attributes']['id']}\" class=\"{$class}\">{$link['title']}</a>";
+			$output .= "<a href=\"{$link['href']}\" id=\"{$link['attributes']['id']}\" class=\"{$class}\"> " . check_plain($link['title']) . "</a>";
 			$output .= "</li>\n";
 			$i++;
 		}