diff --git a/extensions/markdown-language-features/src/util/dom.ts b/extensions/markdown-language-features/src/util/dom.ts
index 0f6c00da9da..8bbce79c303 100644
--- a/extensions/markdown-language-features/src/util/dom.ts
+++ b/extensions/markdown-language-features/src/util/dom.ts
@@ -5,7 +5,10 @@
 import * as vscode from 'vscode';
 
 export function escapeAttribute(value: string | vscode.Uri): string {
-	return value.toString().replace(/"/g, '"');
+	return value.toString()
+		.replace(/&/g, '&')
+		.replace(/"/g, '"')
+		.replace(/'/g, ''');
 }
 
 export function getNonce() {