diff --git a/en/recovery-challenge.cgi b/en/recovery-challenge.cgi
index 7a9f205..837f0cc 100755
--- a/en/recovery-challenge.cgi
+++ b/en/recovery-challenge.cgi
@@ -106,7 +106,7 @@ case "$arg_method" in
 		;;
 esac
 
-sedcmd=" -e 's/USERNAME/$arg_username/' -e 's/CHALLENGE/$(<$runtime_dir/$arg_username)/' -e 's/KEYID/$keyid/' -e 's\\NAV\\$(php $(dirname $0)/nav.php | sed 's/\&/\\\&/g')\\' -e 's\\FOOTER\\$($(dirname $0)/footer.cgi | sed '1,2d' | sed 's/\&/\\\&/g')\\'"
+sedcmd=" -e 's/USERNAME/$arg_username/' -e 's/CHALLENGE/$(<$runtime_dir/$arg_username)/' -e 's/KEYID/$keyid/' -e 's\\NAV\\$(php $(dirname $0)/nav.php | sed 's/\&/\\\&/g')\\' -e 's\\FOOTER\\$($(dirname $0)/footer.cgi | sed '1,2d' | sed 's/\&lt;/</g')\\'"
 sedcmd="$sedcmd $(if [[ $nokey == 1 ]]; then
 	printf '%s' '-e "s/NOKEY/This user has no <code>.pgp.asc</code> file/"'
 else