Index: lams_learning/web/lessonComplete.jsp
===================================================================
diff -u -r0a0ce617ce5359d3750cc341790708909e62d125 -r2673317d66ead2aa551d93dcb5f5e9afab5f532e
--- lams_learning/web/lessonComplete.jsp	(.../lessonComplete.jsp)	(revision 0a0ce617ce5359d3750cc341790708909e62d125)
+++ lams_learning/web/lessonComplete.jsp	(.../lessonComplete.jsp)	(revision 2673317d66ead2aa551d93dcb5f5e9afab5f532e)
@@ -30,11 +30,15 @@
 <c:set var="displayPrintButton"><lams:Configuration key="DisplayPrintButton"/></c:set>
 
 <div id="content">
-
+	<c:set var="displayName">
+		<lams:user property="firstName"/> <lams:user property="lastName"/>
+	</c:set>
+	
+	
 	<h2>
 		<fmt:message key="message.lesson.finished">
 			<fmt:param>
-				<lams:user property="firstName"/> <lams:user property="lastName"/>
+				<c:out value="${displayName}" escapeXml="true"/>
 			</fmt:param>
 		</fmt:message>
 	</h2>
@@ -54,7 +58,7 @@
 		<p>
 			<fmt:message key="message.released.lessons">
 				<fmt:param>
-					${releasedLessons}
+					<c:out value="${releasedLessons}" escapeXml="true"/> 
 				</fmt:param>		
 			</fmt:message>
 		</p>
Index: lams_learning/web/mobile/lessonComplete.jsp
===================================================================
diff -u -r7cb4c24f3bd88110fbb593255cfc4ec05d2a821c -r2673317d66ead2aa551d93dcb5f5e9afab5f532e
--- lams_learning/web/mobile/lessonComplete.jsp	(.../lessonComplete.jsp)	(revision 7cb4c24f3bd88110fbb593255cfc4ec05d2a821c)
+++ lams_learning/web/mobile/lessonComplete.jsp	(.../lessonComplete.jsp)	(revision 2673317d66ead2aa551d93dcb5f5e9afab5f532e)
@@ -33,14 +33,17 @@
 </div>
 
 <div data-role="content">
+	<c:set var="displayName">
+		<lams:user property="firstName"/> <lams:user property="lastName"/>
+	</c:set>
+		
 	<h2>
 		<fmt:message key="message.lesson.finished">
 			<fmt:param>
-				<lams:user property="firstName"/> <lams:user property="lastName"/>
+				<c:out value="${displayName}" escapeXml="true"/>
 			</fmt:param>
 		</fmt:message>
 	</h2>
-	
 	<p>
 		<fmt:message key="message.lesson.finishedCont">
 			<fmt:param>
@@ -56,7 +59,7 @@
 		<p>
 			<fmt:message key="message.released.lessons">
 				<fmt:param>
-					${releasedLessons}
+					<c:out value="${releasedLessons}" escapeXml="true"/>
 				</fmt:param>		
 			</fmt:message>
 		</p>
Index: lams_learning/web/presenceChat.jsp
===================================================================
diff -u -rd1915c892bc5ca61b4c5065d7fc1a188fdc0b1f2 -r2673317d66ead2aa551d93dcb5f5e9afab5f532e
--- lams_learning/web/presenceChat.jsp	(.../presenceChat.jsp)	(revision d1915c892bc5ca61b4c5065d7fc1a188fdc0b1f2)
+++ lams_learning/web/presenceChat.jsp	(.../presenceChat.jsp)	(revision 2673317d66ead2aa551d93dcb5f5e9afab5f532e)
@@ -15,7 +15,10 @@
 	var presenceEnabled = ${param.presenceEnabledPatch eq 'true'};
 	var presenceShown = ${param.presenceShown eq 'true'};
 	var presenceImEnabled = ${param.presenceImEnabled eq 'true'};
-	var nickname = "<lams:user property="firstName"/>" + " " + "<lams:user property="lastName"/>";
+	<c:set var="displayName">
+		<lams:user property="firstName"/>" + " " + "<lams:user property="lastName"/>
+	</c:set>
+	var nickname = "<c:out value='${displayName}'/>";
 	
 	// labels used in JS file
 	var labelSend = '<fmt:message key="learner.im.send"/>';