diff -r 91d1fc2a3a14 -r 33b6843fdf8a src/main/webapp/WEB-INF/jsp/user-form.jsp
--- a/src/main/webapp/WEB-INF/jsp/user-form.jsp	Fri May 22 17:26:27 2020 +0200
+++ b/src/main/webapp/WEB-INF/jsp/user-form.jsp	Fri May 22 21:23:57 2020 +0200
@@ -42,20 +42,20 @@
         <tbody>
         <tr>
             <th><fmt:message key="thead.username"/></th>
-            <td><input name="username" type="text" maxlength="50" required value="${user.username}"
+            <td><input name="username" type="text" maxlength="50" required value="<c:out value="${user.username}"/>"
                        <c:if test="${user.id ge 0}">readonly</c:if> /></td>
         </tr>
         <tr>
             <th><fmt:message key="thead.givenname"/></th>
-            <td><input name="givenname" type="text" maxlength="50" value="${user.givenname}"/></td>
+            <td><input name="givenname" type="text" maxlength="50" value="<c:out value="${user.givenname}"/>" /></td>
         </tr>
         <tr>
             <th><fmt:message key="thead.lastname"/></th>
-            <td><input name="lastname" type="text" maxlength="50" value="${user.lastname}"/></td>
+            <td><input name="lastname" type="text" maxlength="50" value="<c:out value="${user.lastname}"/>" /></td>
         </tr>
         <tr>
             <th><fmt:message key="thead.mail"/></th>
-            <td><input name="mail" type="email" maxlength="50" value="${user.mail}"/></td>
+            <td><input name="mail" type="email" maxlength="50" value="<c:out value="${user.mail}"/>" /></td>
         </tr>
         </tbody>
         <tfoot>