--- httpd/httpd/branches/1.3.x/src/main/http_protocol.c	2005/08/08 17:52:01	230826
+++ build-tree-apache/apache_1.3.34/src/main/http_protocol.c	2006/04/19 08:28:04	395171
@@ -3137,7 +3137,7 @@
 	    ap_rvputs(r, "The expectation given in the Expect request-header"
 	              "\nfield could not be met by this server.<P>\n"
 	              "The client sent<PRE>\n    Expect: ",
-	              ap_table_get(r->headers_in, "Expect"), "\n</PRE>\n"
+	              ap_escape_html(r->pool, ap_table_get(r->headers_in, "Expect")), "\n</PRE>\n"
 	              "but we only allow the 100-continue expectation.\n",
 	              NULL);
 	    break;
