diff --git a/htdocs/commande/list.php b/htdocs/commande/list.php
index d9a6876ac17..76865631995 100644
--- a/htdocs/commande/list.php
+++ b/htdocs/commande/list.php
@@ -2213,8 +2213,8 @@ while ($i < $imaxinloop) {
// Alias name
if (!empty($arrayfields['s.name_alias']['checked'])) {
- print '
';
- print $obj->alias;
+ print ' | ';
+ print dol_escape_htmltag($obj->alias);
print ' | ';
if (!$i) {
$totalarray['nbfield']++;
@@ -2244,8 +2244,8 @@ while ($i < $imaxinloop) {
// Town
if (!empty($arrayfields['s.town']['checked'])) {
- print '';
- print $obj->town;
+ print ' | ';
+ print dol_escape_htmltag($obj->town);
print ' | ';
if (!$i) {
$totalarray['nbfield']++;
@@ -2254,8 +2254,8 @@ while ($i < $imaxinloop) {
// Zip
if (!empty($arrayfields['s.zip']['checked'])) {
- print '';
- print $obj->zip;
+ print ' | ';
+ print dol_escape_htmltag($obj->zip);
print ' | ';
if (!$i) {
$totalarray['nbfield']++;
@@ -2264,7 +2264,7 @@ while ($i < $imaxinloop) {
// State
if (!empty($arrayfields['state.nom']['checked'])) {
- print "".$obj->state_name." | \n";
+ print ''.dol_escape_htmltag($obj->state_name)." | \n";
if (!$i) {
$totalarray['nbfield']++;
}