Index: lams_tool_forum/web/jsps/export/exportportfolio.jsp
===================================================================
diff -u -r10236fecf4e70b2c533175e4a4e114164b0faefc -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/export/exportportfolio.jsp	(.../exportportfolio.jsp)	(revision 10236fecf4e70b2c533175e4a4e114164b0faefc)
+++ lams_tool_forum/web/jsps/export/exportportfolio.jsp	(.../exportportfolio.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -75,7 +75,7 @@
 											<fmt:message key="label.default.user.name"/>
 										</c:set>
 									</c:if>
-									${author}						
+									<c:out value="${author}" escapeXml="true"/>						
 											-
 									<lams:Date value="${msgDto.message.updated}"/>
 								</c:if>
Index: lams_tool_forum/web/jsps/learning/mobile/message/topiclist.jsp
===================================================================
diff -u -raca750ab28a0096d278c65e5ba48fd41f705c0e9 -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/learning/mobile/message/topiclist.jsp	(.../topiclist.jsp)	(revision aca750ab28a0096d278c65e5ba48fd41f705c0e9)
+++ lams_tool_forum/web/jsps/learning/mobile/message/topiclist.jsp	(.../topiclist.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -38,10 +38,10 @@
 					<a href="${viewtopic}" data-ajax="false">
 						<c:choose>
 							<c:when test="${fn:length(topic.message.subject) > 14}">
-								${fn:substring(topic.message.subject, 0, 13)}...
+								<c:out value="${fn:substring(topic.message.subject, 0, 13)}..." escapeXml="true"/>
 							</c:when>
 							<c:otherwise>
-								${topic.message.subject}
+								<c:out value="${topic.message.subject}" escapeXml="true"/>
 							</c:otherwise>
 						</c:choose>
 					</a>
Index: lams_tool_forum/web/jsps/learning/mobile/reply.jsp
===================================================================
diff -u -r172f7888a9cc330a3141e9fd1114aa1b17ef92c0 -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/learning/mobile/reply.jsp	(.../reply.jsp)	(revision 172f7888a9cc330a3141e9fd1114aa1b17ef92c0)
+++ lams_tool_forum/web/jsps/learning/mobile/reply.jsp	(.../reply.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -25,7 +25,7 @@
 			<table cellspacing="0" class="forum">
 				<tr>
 					<th class="ui-bar-c ui-corner-top">
-						<c:out value='${originalMessage.message.subject}' escapeXml='false' />
+						<c:out value='${originalMessage.message.subject}' escapeXml='true' />
 					</th>
 				</tr>
 				<tr class="ui-btn-up-d">
Index: lams_tool_forum/web/jsps/learning/reply.jsp
===================================================================
diff -u -r0342d3b763a6bd8c30e20cd2026e1c8c53f5f374 -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/learning/reply.jsp	(.../reply.jsp)	(revision 0342d3b763a6bd8c30e20cd2026e1c8c53f5f374)
+++ lams_tool_forum/web/jsps/learning/reply.jsp	(.../reply.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -25,8 +25,7 @@
 	<div>
 	<table cellspacing="0" class="forum">
 		<tr>
-			<th><c:out value='${originalMessage.message.subject}'
-				escapeXml='true' /></th>
+			<th><c:out value='${originalMessage.message.subject}' escapeXml='true' /></th>
 		</tr>
 		<tr>
 			<td class="posted-by"><fmt:message key="lable.topic.subject.by" />
Index: lams_tool_forum/web/jsps/monitoring/message/viewtopic.jsp
===================================================================
diff -u -rdbab108fb2d8f57bc99aaeef05449e7ff59f1d66 -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/monitoring/message/viewtopic.jsp	(.../viewtopic.jsp)	(revision dbab108fb2d8f57bc99aaeef05449e7ff59f1d66)
+++ lams_tool_forum/web/jsps/monitoring/message/viewtopic.jsp	(.../viewtopic.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -18,7 +18,7 @@
 						<fmt:message key="label.default.user.name"/>
 					</c:set>
 				</c:if>
-				${author}						
+				<c:out value="${author}" escapeXml="true"/>						
 				
 				-
 				<lams:Date value="${topic.message.updated}"/>
Index: lams_tool_forum/web/jsps/monitoring/message/viewtopictree.jsp
===================================================================
diff -u -rbf1c66f82afbc349f5702f29a0c6ab6ff9add34a -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/monitoring/message/viewtopictree.jsp	(.../viewtopictree.jsp)	(revision bf1c66f82afbc349f5702f29a0c6ab6ff9add34a)
+++ lams_tool_forum/web/jsps/monitoring/message/viewtopictree.jsp	(.../viewtopictree.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -20,7 +20,7 @@
 									<fmt:message key="label.default.user.name"/>
 								</c:set>
 							</c:if>
-							${author}						
+							<c:out value="${author}" escapeXml="true"/>						
 					
 							-
 							<lams:Date value="${msgDto.message.updated}"/>
Index: lams_tool_forum/web/jsps/monitoring/updatemarks.jsp
===================================================================
diff -u -r7817bc4fce30416c9737875ae2d137be0c6aa8ba -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/monitoring/updatemarks.jsp	(.../updatemarks.jsp)	(revision 7817bc4fce30416c9737875ae2d137be0c6aa8ba)
+++ lams_tool_forum/web/jsps/monitoring/updatemarks.jsp	(.../updatemarks.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -41,7 +41,7 @@
 						<fmt:message key="label.default.user.name"/>
 					</c:set>
 				</c:if>
-				${author}						
+				<c:out value="${author}" escapeXml="true"/>						
 			</td>
 			<td>
 				<c:out value="${topic.message.replyNumber}" />
Index: lams_tool_forum/web/jsps/monitoring/viewmarks.jsp
===================================================================
diff -u -r11ee5cc4fa5bb15f77be3f81056a9437c9e7c602 -r6a98321bc4bc752a6ad20f890c38da1f5030c120
--- lams_tool_forum/web/jsps/monitoring/viewmarks.jsp	(.../viewmarks.jsp)	(revision 11ee5cc4fa5bb15f77be3f81056a9437c9e7c602)
+++ lams_tool_forum/web/jsps/monitoring/viewmarks.jsp	(.../viewmarks.jsp)	(revision 6a98321bc4bc752a6ad20f890c38da1f5030c120)
@@ -56,7 +56,7 @@
 							<fmt:message key="label.default.user.name"/>
 						</c:set>
 					</c:if>
-					${author}			
+					<c:out value="${author}" escapeXml="true"/>	
 				</td>
 				<td>
 					<c:out value="${topic.message.replyNumber}" />