diff --git a/src/private/templates/sidebar.latte b/src/private/templates/sidebar.latte
index 859e0f7..c56e5c5 100644
--- a/src/private/templates/sidebar.latte
+++ b/src/private/templates/sidebar.latte
@@ -11,7 +11,7 @@
             <!-- The NBSP is here to preserve a space when the text gets truncated -->
             <p>
                 <span><i class="fas fa-globe fa-fw"></i>{_"STATUS_ADDRESS"}&nbsp;</span>
-                <span><a href="ts3server://{$config["query_displayip"]}">{$config["query_displayip"]}</a></span>
+                <span><a href="ts3server://{$config["query_displayip"]|escapeurl}">{$config["query_displayip"]}</a></span>
             </p>
             <p>
                 <span><i class="fas fa-power-off fa-fw"></i>{_"STATUS_CLIENTS_ONLINE"}&nbsp;</span>
diff --git a/src/private/templates/utils/modal-login.latte b/src/private/templates/utils/modal-login.latte
index 481d1fd..92f9f69 100644
--- a/src/private/templates/utils/modal-login.latte
+++ b/src/private/templates/utils/modal-login.latte
@@ -31,8 +31,8 @@
                 <!-- Not connected to the server message -->
                 <div class="not-connected text-center" style="display: none">
                     <h3>Not connected</h3>
-                    <p>Connect to <a href="ts3server://{$config["query_displayip"]}">{$config["query_displayip"]}</a> and wait ±30 seconds.<br>The website will auto-refresh.</p>
-                    <a href="ts3server://{$config["query_displayip"]}" class="btn btn-primary">
+                    <p>Connect to <a href="ts3server://{$config["query_displayip"]|escapeurl}">{$config["query_displayip"]}</a> and wait ±30 seconds.<br>The website will auto-refresh.</p>
+                    <a href="ts3server://{$config["query_displayip"]|escapeurl}" class="btn btn-primary">
                         <i class="fas fa-sign-in-alt"></i>Connect
                     </a>