diff --git a/xbps-src/shutils/metadata.sh b/xbps-src/shutils/metadata.sh
index 77b270f067f..8b540236b16 100644
--- a/xbps-src/shutils/metadata.sh
+++ b/xbps-src/shutils/metadata.sh
@@ -332,7 +332,7 @@ _EOF
 		echo "<key>replaces</key>" >> $TMPFPROPS
 		echo "<array>" >> $TMPFPROPS
 		for f in ${replaces}; do
-			echo "<string>$f</string>" >> $TMPFPROPS
+			echo "<string>$(echo $f|sed "s|<|\&lt;|g;s|>|\&gt;|g")</string>" >> $TMPFPROPS
 		done
 		echo "</array>" >> $TMPFPROPS
 	fi