From bd9b5c1aea4f691085588f781e49007e0f15f773 Mon Sep 17 00:00:00 2001
From: Lohikar <lohikar@protonmail.com>
Date: Thu, 5 Jan 2017 15:29:09 -0600
Subject: [PATCH] Fixes #1396 (#1399)

---
 code/modules/client/preference_setup/general/03_body.dm | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/code/modules/client/preference_setup/general/03_body.dm b/code/modules/client/preference_setup/general/03_body.dm
index be9301da4e0..c241d8ba5fa 100644
--- a/code/modules/client/preference_setup/general/03_body.dm
+++ b/code/modules/client/preference_setup/general/03_body.dm
@@ -605,8 +605,9 @@ var/global/list/valid_bloodtypes = list("A+", "A-", "B+", "B-", "AB+", "AB-", "O
 	dat += "<td width = 400>[current_species.blurb]</td>"
 	dat += "<td width = 200 align='center'>"
 	if("preview" in icon_states(current_species.icobase))
-		usr << browse_rsc(icon(current_species.icobase,"preview"), "species_preview_[current_species.name].png")
-		dat += "<img src='species_preview_[current_species.name].png' width='64px' height='64px'><br/><br/>"
+		var/curr_name = html_encode(current_species.name)
+		usr << browse_rsc(icon(current_species.icobase,"preview"), "species_preview_[curr_name].png")
+		dat += "<img src='species_preview_[curr_name].png' width='64px' height='64px'><br/><br/>"
 	dat += "<b>Language:</b> [current_species.language]<br/>"
 	dat += "<small>"
 	if(current_species.spawn_flags & CAN_JOIN)