diff --git a/src/main/webapp/WEB-INF/velocity.properties b/src/main/webapp/WEB-INF/velocity.properties
index bee571b..e3ba7d5 100644
--- a/src/main/webapp/WEB-INF/velocity.properties
+++ b/src/main/webapp/WEB-INF/velocity.properties
@@ -4,3 +4,5 @@ velocimacro.permissions.allow.inline.local.scope=true
 velocimacro.context.localscope=false
 velocimacro.library.autoreload=true
 output.encoding = UTF-8
+eventhandler.referenceinsertion.class = org.apache.velocity.app.event.implement.EscapeHtmlReference
+eventhandler.escape.html.match = /.*/