diff --git a/main/document/document.php b/main/document/document.php
index 17837084b75..74450838c72 100755
--- a/main/document/document.php
+++ b/main/document/document.php
@@ -1962,7 +1962,7 @@ function convertModal (id, format) {
             }
 
             // Icons (clickable)
-            $row[] = DocumentManager::create_document_link(
+            $row[] = Security::remove_XSS(DocumentManager::create_document_link(
                 $http_www,
                 $document_data,
                 true,
@@ -1971,7 +1971,7 @@ function convertModal (id, format) {
                 $size,
                 $isAllowedToEdit,
                 $is_certificate_mode
-            );
+            ));
 
             $path_info = pathinfo($document_data['path']);
             if (isset($path_info['extension']) &&
@@ -2003,7 +2003,7 @@ function convertModal (id, format) {
             $titleWithLink .= $invisibility_span_close.$user_link;
             $row[] = $titleWithLink;
 
-            if ($document_data['filetype'] == 'folder') {
+            if ($document_data['filetype'] === 'folder') {
                 $displaySize = '<span id="document_size_'.$document_data['id']
                     .'" data-path= "'.$document_data['path']
                     .'" class="document_size"></span>';