diff --git a/devel.module b/devel.module
index 5b12d81b35a489aa6a3fa608dfc3c82a405cb49c..96ecb6e8524c2805ff860405cc090a29a8e8565a 100644
--- a/devel.module
+++ b/devel.module
@@ -1034,7 +1034,7 @@ function devel_variable_edit($name) {
       '#value' => t('Sorry, complex variable types may not be edited yet. Use the <em>Execute PHP</em> block and the <a href="@variable-set-doc">variable_set()</a> function.', array('@variable-set-doc' => 'http://api.drupal.org/api/HEAD/function/variable_set'))
     );
   }
-  drupal_set_title($name);
+  drupal_set_title(check_plain($name));
   return $form;
 }