diff --git a/0001-Avoid-accidental-javascript-in-javadoc.patch b/0001-Avoid-accidental-javascript-in-javadoc.patch
new file mode 100644
index 0000000..8016b86
--- /dev/null
+++ b/0001-Avoid-accidental-javascript-in-javadoc.patch
@@ -0,0 +1,25 @@
+From 214bd64764a48c5c3ad68829e0e35377f45ce221 Mon Sep 17 00:00:00 2001
+From: Michael Simacek <msimacek@redhat.com>
+Date: Wed, 31 May 2017 13:44:36 +0200
+Subject: [PATCH] Avoid accidental javascript in javadoc
+
+---
+ src/main/java/org/testng/xml/TestNGContentHandler.java | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/src/main/java/org/testng/xml/TestNGContentHandler.java b/src/main/java/org/testng/xml/TestNGContentHandler.java
+index e36c413..da9a069 100755
+--- a/src/main/java/org/testng/xml/TestNGContentHandler.java
++++ b/src/main/java/org/testng/xml/TestNGContentHandler.java
+@@ -240,7 +240,7 @@ public class TestNGContentHandler extends DefaultHandler {
+   }
+ 
+   /**
+-   * Parse <script>
++   * Parse &lt;script&gt;
+    */
+   private void xmlScript(boolean start, Attributes attributes) {
+     if (start) {
+-- 
+2.9.4
+
diff --git a/testng.spec b/testng.spec
index 1b99ec7..0327cc0 100644
--- a/testng.spec
+++ b/testng.spec
@@ -2,11 +2,12 @@
 
 Name:           testng
 Version:        6.9.12
-Release:        4%{?dist}
+Release:        5%{?dist}
 Summary:        Java-based testing framework
 License:        ASL 2.0
 URL:            http://testng.org/
 Source0:        https://github.com/cbeust/testng/archive/%{version}.tar.gz
+Patch0:         0001-Avoid-accidental-javascript-in-javadoc.patch
 
 BuildArch:      noarch
 
@@ -42,6 +43,8 @@ This package contains the API documentation for %{name}.
 %prep
 %setup -q -n %{name}-%{version}
 
+%patch0 -p1
+
 # remove any bundled libs, but not test resources
 find ! -path "*/test/*" -name *.jar -print -delete
 find -name *.class -delete
@@ -92,6 +95,9 @@ cp -p ./src/main/java/*.dtd.html ./src/main/resources/.
 %license LICENSE.txt
 
 %changelog
+* Wed May 31 2017 Michael Simacek <msimacek@redhat.com> - 6.9.12-5
+- Avoid accidental javascript in comment
+
 * Fri Feb 17 2017 Mat Booth <mat.booth@redhat.com> - 6.9.12-4
 - License correction