* If you'd like to further customize these Post Format views, you may create a
* new template file for each specific one.
*
* If you'd like to further customize these Post Format views, you may create a
* new template file for each specific one.
*
- <h1 class="archive-title"><?php printf( __( '%s Archives', 'twentythirteen' ), '<span>' . get_post_format_string( get_post_format() ) . '</span>' ); ?></h1>
+ <h1 class="archive-title"><?php printf( __( '%s Archives', 'twentythirteen' ), '<span>' . esc_html( get_post_format_string( get_post_format() ) ) . '</span>' ); ?></h1>