Index: lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java =================================================================== diff -u -raf388fe5ff933f084e15bfa2b72c69c9e8664518 -rbdc5af4b22897438de581bb8681d7bc7c64dbbf5 --- lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java (.../ScratchieServiceImpl.java) (revision af388fe5ff933f084e15bfa2b72c69c9e8664518) +++ lams_tool_scratchie/src/java/org/lamsfoundation/lams/tool/scratchie/service/ScratchieServiceImpl.java (.../ScratchieServiceImpl.java) (revision bdc5af4b22897438de581bb8681d7bc7c64dbbf5) @@ -42,6 +42,7 @@ import java.util.SortedMap; import java.util.TreeSet; +import org.apache.commons.lang.StringEscapeUtils; import org.apache.commons.lang.StringUtils; import org.apache.log4j.Logger; import org.apache.poi.ss.usermodel.IndexedColors; @@ -909,7 +910,8 @@ ScratchieConstants.TOOL_SIGNATURE, user.getUserId().intValue()); if ((notebookEntry != null) && StringUtils.isNotBlank(notebookEntry.getEntry())) { ReflectDTO reflectDTO = new ReflectDTO(notebookEntry.getUser()); - reflectDTO.setReflection(notebookEntry.getEntry()); + String reflection = StringEscapeUtils.escapeJavaScript(notebookEntry.getEntry()); + reflectDTO.setReflection(reflection); reflectDTO.setIsGroupLeader(this.isUserGroupLeader(user, session)); reflections.add(reflectDTO);