Version 4.1.2

system/Output/Plugin/Setting.php

@@ -38,6 +38,13 @@ class _Setting
 	 */
 	public static function runPlugin( $data, $options )
 	{
-		return "\IPS\Settings::i()->$data";
+		if ( isset( $options['escape'] ) )
+		{
+			return "htmlspecialchars( \IPS\Settings::i()->$data, ENT_QUOTES | \IPS\HTMLENTITIES, 'UTF-8', TRUE )";
+		}
+		else
+		{
+			return "\IPS\Settings::i()->$data";
+		}
 	}
 }