diff --git a/www/js/gene_collection_manager.js b/www/js/gene_collection_manager.js
index d0591e5a..65ae4dd3 100644
--- a/www/js/gene_collection_manager.js
+++ b/www/js/gene_collection_manager.js
@@ -1103,6 +1103,9 @@ const setupPagination = (pagination) => {
  * @returns {void}
  */
 const showGcActionNote = (gcId, shareUrl) => {
+    // sanitize shareUrl
+    shareUrl = shareUrl.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+
     const noteSelector = `#result_gc_id_${gcId} span.js-gc-action-note`;
     const noteSelecterElt = document.querySelector(noteSelector);