diff --git a/frappe/public/js/frappe/form/form.js b/frappe/public/js/frappe/form/form.js
index ec690e7a41..2dc180ed8c 100644
--- a/frappe/public/js/frappe/form/form.js
+++ b/frappe/public/js/frappe/form/form.js
@@ -1837,7 +1837,7 @@ frappe.ui.form.Form = class FrappeForm {
 						<a class="indicator ${get_color(doc || {})}"
 							href="/app/${frappe.router.slug(df.options)}/${escaped_name}"
 							data-doctype="${df.options}"
-							data-name="${value}">
+							data-name="${frappe.utils.escape_html(value)}">
 							${label}
 						</a>
 					`;
diff --git a/frappe/public/js/frappe/ui/link_preview.js b/frappe/public/js/frappe/ui/link_preview.js
index 864246d338..71dc29ebe8 100644
--- a/frappe/public/js/frappe/ui/link_preview.js
+++ b/frappe/public/js/frappe/ui/link_preview.js
@@ -26,7 +26,7 @@ frappe.ui.LinkPreview = class {
 	identify_doc() {
 		if (this.is_link) {
 			this.doctype = this.element.attr("data-doctype");
-			this.name = this.element.attr("data-name");
+			this.name = frappe.utils.unescape_html(this.element.attr("data-name"));
 			this.href = this.element.attr("href");
 		} else {
 			this.href = this.element