Index: lams_tool_lamc/web/monitoring/Reflections.jsp
===================================================================
diff -u -re86557b2e2a6b6dd1c750263f1bacc60fceaabbb -r24b8afc681eaf7ee41fc7b59aab54cf86140044c
--- lams_tool_lamc/web/monitoring/Reflections.jsp	(.../Reflections.jsp)	(revision e86557b2e2a6b6dd1c750263f1bacc60fceaabbb)
+++ lams_tool_lamc/web/monitoring/Reflections.jsp	(.../Reflections.jsp)	(revision 24b8afc681eaf7ee41fc7b59aab54cf86140044c)
@@ -17,15 +17,15 @@
 					  	 		<c:set var="reflectionUid" scope="request" value="${currentDto.reflectionUid}"/>
 								<tr>			
 									<td valign=top class="align-left">
-										 <c:out value="${userName}" escapeXml="false"/> 
+										 <c:out value="${userName}" escapeXml="true"/> 
 									 </td>
 	
 									<td valign=top class="align-right">
 										<c:url value="monitoring.do" var="openNotebook">
 											<c:param name="dispatch" value="openNotebook" />
 											<c:param name="uid" value="${reflectionUid}" />
 											<c:param name="userId" value="${userId}" />
-											<c:param name="userName" value="${userName}" />
+											<c:param name="userName" value="${fn:escapeXml(userName)}" />
 											<c:param name="sessionId" value="${sessionId}" />													
 											<c:param name="contentFolderID" value="${McMonitoringForm.contentFolderID}" />																								
 										</c:url>