diff --git a/acl/log_parser.pl b/acl/log_parser.pl
index 4a70230e5..d61cf8d9c 100755
--- a/acl/log_parser.pl
+++ b/acl/log_parser.pl
@@ -27,7 +27,8 @@ if ($action eq 'modify') {
 	}
 elsif ($action eq 'create') {
 	if ($p->{'clone'}) {
-		return &text('log_clone'.$g, "<tt>$p->{'clone'}</tt>",
+		return &text('log_clone'.$g,
+			     "<tt>".&html_escape($p->{'clone'})."</tt>",
 			     "<tt>".&html_escape($object)."</tt>");
 		}
 	else {
diff --git a/acl/t/run-tests.t b/acl/t/run-tests.t
index 0aea300f3..b52d14ce0 100644
--- a/acl/t/run-tests.t
+++ b/acl/t/run-tests.t
@@ -941,6 +941,12 @@ is(group_line({ name => 'empty' }),
     for my $case (
         [ 'delete user',
           [ 'admin', 's', 'delete', 'user', $payload, {} ] ],
+        [ 'create with clone (clone source)',
+          [ 'admin', 's', 'create', 'user', 'safe',
+            { clone => $payload } ] ],
+        [ 'create with clone (new name)',
+          [ 'admin', 's', 'create', 'user', $payload,
+            { clone => 'safe' } ] ],
         [ 'modify rename (old name)',
           [ 'admin', 's', 'modify', 'user', 'safe',
             { old => $payload, name => 'safe' } ] ],