Index: lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/actions/MonitoringAction.java =================================================================== diff -u -r2cb29f8bc144ad08d33c6efe3e4c96f814a9a571 -r7b7aa3abd22de2b778d5608144ba9f92e16d1b4c --- lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/actions/MonitoringAction.java (.../MonitoringAction.java) (revision 2cb29f8bc144ad08d33c6efe3e4c96f814a9a571) +++ lams_tool_forum/src/java/org/lamsfoundation/lams/tool/forum/web/actions/MonitoringAction.java (.../MonitoringAction.java) (revision 7b7aa3abd22de2b778d5608144ba9f92e16d1b4c) @@ -297,7 +297,7 @@ JSONObject responseRow = new JSONObject(); responseRow.put(ForumConstants.ATTR_USER_UID, user.getUid()); - responseRow.put("userName", StringEscapeUtils.escapeCsv(user.getLastName() + " " + user.getFirstName())); + responseRow.put("userName", StringEscapeUtils.escapeHtml(user.getLastName() + " " + user.getFirstName())); int numberOfPosts = 0; boolean isAnyPostsMarked = false; @@ -332,7 +332,7 @@ ForumConstants.TOOL_SIGNATURE, user.getUserId().intValue()); String reflection = (notebookEntry == null) ? null : notebookEntry.getEntry(); - responseRow.put("notebookEntry", reflection); + responseRow.put("notebookEntry", StringEscapeUtils.escapeHtml(reflection)); } rows.put(responseRow);