diff --git a/spec/factories/conferences.rb b/spec/factories/conferences.rb
index 8a9186a6..211d124e 100644
--- a/spec/factories/conferences.rb
+++ b/spec/factories/conferences.rb
@@ -2,7 +2,7 @@
 
 FactoryGirl.define do
   factory :conference do
-    title { Faker::Book.title }
+    title { CGI.escapeHTML(Faker::Book.title) }
     short_title { SecureRandom.urlsafe_base64(4) }
     timezone { Faker::Address.time_zone }
     start_date { Date.today }
diff --git a/spec/factories/events.rb b/spec/factories/events.rb
index 09c74afd..e376c681 100644
--- a/spec/factories/events.rb
+++ b/spec/factories/events.rb
@@ -2,8 +2,8 @@
 
 FactoryGirl.define do
   factory :event do
-    title { Faker::Hipster.sentence }
-    abstract { Faker::Hipster.paragraph(2) }
+    title { CGI.escapeHTML(Faker::Hipster.sentence) }
+    abstract { CGI.escapeHTML(Faker::Hipster.paragraph(2)) }
 
     program
 
diff --git a/spec/factories/sponsors.rb b/spec/factories/sponsors.rb
index 5d531991..3fe99d74 100644
--- a/spec/factories/sponsors.rb
+++ b/spec/factories/sponsors.rb
@@ -2,7 +2,7 @@
 
 FactoryGirl.define do
   factory :sponsor do
-    name { Faker::Company.name }
+    name { CGI.escapeHTML(Faker::Company.name) }
     website_url { Faker::Internet.url }
     description { Faker::Lorem.paragraph }
 
diff --git a/spec/factories/tickets.rb b/spec/factories/tickets.rb
index 88532b86..508e2f33 100644
--- a/spec/factories/tickets.rb
+++ b/spec/factories/tickets.rb
@@ -1,6 +1,6 @@
 FactoryGirl.define do
   factory :ticket do
-    title { "#{Faker::Hipster.word} Ticket" }
+    title { CGI.escapeHTML("#{Faker::Hipster.word} Ticket") }
     price_cents 1000
     price_currency 'USD'
   end
diff --git a/spec/factories/tracks.rb b/spec/factories/tracks.rb
index 1b7f8083..153dfc48 100644
--- a/spec/factories/tracks.rb
+++ b/spec/factories/tracks.rb
@@ -1,6 +1,6 @@
 FactoryGirl.define do
   factory :track do
-    name { Faker::Commerce.department(2, true) }
+    name { CGI.escapeHTML(Faker::Commerce.department(2, true)) }
     description { Faker::Lorem.sentence }
     color { Faker::Color.hex_color }
     program
diff --git a/spec/factories/venues.rb b/spec/factories/venues.rb
index 92c149cc..2f2c3e8b 100644
--- a/spec/factories/venues.rb
+++ b/spec/factories/venues.rb
@@ -1,7 +1,7 @@
 # Read about factories at https://github.com/thoughtbot/factory_girl
 FactoryGirl.define do
   factory :venue do
-    name { "#{Faker::Company.name} Office" }
+    name { CGI.escapeHTML("#{Faker::Company.name} Office") }
     street { Faker::Address.street_address }
     city { Faker::Address.city }
     postalcode { Faker::Address.postcode }