Index: lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/LearningAction.java
===================================================================
diff -u -r189a459a13057ddecbfa3db9e36e2a2b29bef5db -r68279e681c15bfcb7d349380a63fe50a39d9e4de
--- lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/LearningAction.java	(.../LearningAction.java)	(revision 189a459a13057ddecbfa3db9e36e2a2b29bef5db)
+++ lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/LearningAction.java	(.../LearningAction.java)	(revision 68279e681c15bfcb7d349380a63fe50a39d9e4de)
@@ -433,7 +433,7 @@
 	    for (ItemRatingCriteriaDTO criteriaDto : itemRatingDto.getCriteriaDtos()) {
 		JSONObject criteriasRow = new JSONObject();
 		criteriasRow.put("ratingCriteriaId", criteriaDto.getRatingCriteria().getRatingCriteriaId());
-		criteriasRow.put("title", StringEscapeUtils.escapeCsv(criteriaDto.getRatingCriteria().getTitle()));
+		criteriasRow.put("title", StringEscapeUtils.escapeHtml(criteriaDto.getRatingCriteria().getTitle()));
 		criteriasRow.put("averageRating", criteriaDto.getAverageRating());
 		criteriasRow.put("numberOfVotes", criteriaDto.getNumberOfVotes());
 		criteriasRow.put("userRating", criteriaDto.getUserRating());
Index: lams_tool_preview/web/WEB-INF/tags/AuthoringRatingCriteria.tag
===================================================================
diff -u -r9f2c1f957570c3885c34d8d162a1f14d82e3aba2 -r68279e681c15bfcb7d349380a63fe50a39d9e4de
--- lams_tool_preview/web/WEB-INF/tags/AuthoringRatingCriteria.tag	(.../AuthoringRatingCriteria.tag)	(revision 9f2c1f957570c3885c34d8d162a1f14d82e3aba2)
+++ lams_tool_preview/web/WEB-INF/tags/AuthoringRatingCriteria.tag	(.../AuthoringRatingCriteria.tag)	(revision 68279e681c15bfcb7d349380a63fe50a39d9e4de)
@@ -255,7 +255,7 @@
 					
 					<td class="criteria-info">
 						<input type="hidden" name="criteriaOrderId${criteria.orderId}" value="${criteria.orderId}">
-						<input type="text" name="criteriaTitle${criteria.orderId}" value="${criteria.title}">
+						<input type="text" name="criteriaTitle${criteria.orderId}" value="${fn:escapeXml(criteria.title)}">
 					</td>
 					
 					<td width="40px">
@@ -349,4 +349,4 @@
 	</div>
 	
 </div>
-<!-- end tab content -->
\ No newline at end of file
+<!-- end tab content -->