Index: lams_tool_daco/web/pages/export/exportportfolio.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/export/exportportfolio.jsp,v
diff -u -r1.3 -r1.4
--- lams_tool_daco/web/pages/export/exportportfolio.jsp	12 Aug 2008 01:43:04 -0000	1.3
+++ lams_tool_daco/web/pages/export/exportportfolio.jsp	27 Mar 2014 13:57:45 -0000	1.4
@@ -36,11 +36,11 @@
 	<table>
 		<tr>
 			<td>
-			<h1>${daco.title}</h1>
+			<h1><c:out value="${daco.title}" escapeXml="true"/></h1>
 			</td>
 		</tr>
 		<tr>
-			<td>${daco.instructions}</td>
+			<td><c:out value-"${daco.instructions}" escapeXml="false"/></td>
 		</tr>
 	</table>
 	<c:choose>
@@ -51,14 +51,14 @@
 			<%@ include file="/pages/learning/questionSummaries.jsp" %>
 			<c:if test="${daco.reflectOnActivity}">
 				<div>
-					<h2>${daco.reflectInstructions }</h2>
+					<h2><lams:out value="${daco.reflectInstructions}" escapeHtml="true"/></h2>
 					<p>
 						<c:choose>
 							<c:when test="${empty reflectEntry}">
 								<fmt:message key="message.no.reflection.available" />
 							</c:when>
 							<c:otherwise>
-								${reflectEntry}
+								<lams:out value="${reflectEntry}" escapeHtml="true"/>
 							</c:otherwise>
 						</c:choose>
 					</p>
@@ -82,7 +82,6 @@
 							<table cellpadding="0" class="alternative-color">
 								<tr>
 									<th><fmt:message key="label.monitoring.fullname" /></th>
-									<th><fmt:message key="label.monitoring.loginname" /></th>
 									<th><fmt:message key="label.monitoring.recordcount" /></th>
 									<th><fmt:message key="label.monitoring.notebook" /></th>
 								</tr>
@@ -95,11 +94,8 @@
 								</c:if>
 								<tr>
 									<td>
-										 ${user.fullName}
+										 <c:out value="${user.fullName}" escapeXml="true"/>
 									</td>
-									<td>
-										 ${user.loginName}
-									</td>
 									<td style="text-align: center; font-weight: bold;">
 										<c:choose>
 											<c:when test="${user.recordCount > 0}">
Index: lams_tool_daco/web/pages/learning/addRecord.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/learning/addRecord.jsp,v
diff -u -r1.7 -r1.8
--- lams_tool_daco/web/pages/learning/addRecord.jsp	23 Feb 2009 21:04:34 -0000	1.7
+++ lams_tool_daco/web/pages/learning/addRecord.jsp	27 Mar 2014 13:57:45 -0000	1.8
@@ -24,11 +24,11 @@
 <table>
 	<tr>
 		<td>
-		<h1>${daco.title}</h1>
+		<h1><c:out value="${daco.title}" escapeXml="true"/></h1>
 		</td>
 	</tr>
 	<tr>
-		<td>${daco.instructions}</td>
+		<td><c:out value="${daco.instructions}" escapeXml="false"/></td>
 	</tr>
 </table>
 <c:if test="${not finishedLock }">
@@ -65,7 +65,7 @@
 				<tr>
 					<td>
 					<div class="bigNumber">${questionStatus.index+1}</div>
-					${question.description}
+					<c:out value="${question.description}" escapeXml="false"/>
 					<c:choose>
 						<%-- The content varies depending on the question type --%>
 						<c:when test="${question.type==1}"><%-- Single line text --%>
@@ -153,7 +153,7 @@
 							</c:if>
 							<c:forEach var="answerOption" items="${question.answerOptions}" varStatus="status">
 							<%-- It displays for example A) instead of 1) --%>
-							${fn:substring(ordinal,status.index,status.index+1)}) <html:radio property="answer[${answerIndex}]" value="${status.index+1}">${answerOption.answerOption}</html:radio><br />
+							${fn:substring(ordinal,status.index,status.index+1)}) <html:radio property="answer[${answerIndex}]" value="${status.index+1}"><c:out value="${answerOption.answerOption}" escapeXml="true"/></html:radio><br />
 							</c:forEach>
 							<c:set var="answerIndex" value="${answerIndex+1}" />
 						</c:when>
@@ -165,7 +165,7 @@
 							<html:select property="answer[${answerIndex}]">
 							<html:option value="0"><fmt:message key="label.learning.dropdown.select" /></html:option>
 							<c:forEach var="answerOption" items="${question.answerOptions}" varStatus="status">
-								<html:option value="${status.index+1}">${answerOption.answerOption}</html:option>
+								<html:option value="${status.index+1}"><c:out value="${answerOption.answerOption}" escapeXml="true"/></html:option>
 							</c:forEach>
 							</html:select>
 							<c:set var="answerIndex" value="${answerIndex+1}" />
@@ -179,7 +179,7 @@
 							<c:forEach var="answerOption" items="${question.answerOptions}" varStatus="status">
 							${fn:substring(ordinal,status.index,status.index+1)})
 							<input type="checkbox" id="checkbox-${questionStatus.index+1}-${status.index+1}" value="${status.index+1}">
-								${answerOption.answerOption}
+								<c:out value="${answerOption.answerOption}" escapeXml="true"/>
 							</input><br />
 							</c:forEach>
 							<c:set var="answerIndex" value="${answerIndex+1}" />
@@ -249,4 +249,4 @@
 		</c:if>
 	</p>
 </c:if>
-</div>
\ No newline at end of file
+</div>
Index: lams_tool_daco/web/pages/learning/listRecords.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/learning/listRecords.jsp,v
diff -u -r1.10 -r1.11
--- lams_tool_daco/web/pages/learning/listRecords.jsp	23 Feb 2009 21:04:34 -0000	1.10
+++ lams_tool_daco/web/pages/learning/listRecords.jsp	27 Mar 2014 13:57:45 -0000	1.11
@@ -49,11 +49,11 @@
 	<table>
 		<tr>
 			<td>
-			<h1>${daco.title}</h1>
+			<h1><c:out value="${daco.title}" escapeXml="true"/></h1>
 			</td>
 		</tr>
 		<tr>
-			<td>${daco.instructions}</td>
+			<td><c:out value="${daco.instructions}" escapeXml="false"/></td>
 		</tr>
 	</table>
 </c:if>
@@ -108,7 +108,7 @@
 							<tr>
 								<td class="fixedCellHeight" style="width: 160px">
 									<div class="bigNumber">${questionStatus.index+1}</div>
-									${question.description}
+									<c:out value="${question.description}" escapeXml="false"/>
 								</td>	
 							</tr>
 						</c:forEach>
@@ -187,7 +187,7 @@
 										<tr>
 											<td>
 											<div class="bigNumber">${questionStatus.index+1}</div>
-											${question.description}
+											<c:out value="${question.description}" escapeXml="false"/>
 											<c:choose>
 												<c:when test="${question.type==1}">
 													<input type="text" size="72" readonly="readonly" value="<c:out  value='${answer.answer}'/>"/>
@@ -244,7 +244,7 @@
 														checked="checked"
 														</c:if>
 														>
-														${answerOption.answerOption}</input><br />
+														<c:out value="${answerOption.answerOption}" escapeXml="true"/></input><br />
 													</c:forEach>
 												</c:when>
 												<c:when test="${question.type==8}">
@@ -255,15 +255,15 @@
 														<c:otherwise>
 															<c:forEach var="answerOption" items="${question.answerOptions}" varStatus="status">
 																<c:if test="${status.index+1==answer.answer}">
-																	<fmt:message key="label.learning.dropdown.selected" /> ${answerOption.answerOption}
+																	<fmt:message key="label.learning.dropdown.selected" /> <c:out value="${answerOption.answerOption}" escapeXml="true"/>
 																</c:if>
 															</c:forEach>
 														</c:otherwise>
 													</c:choose>
 												</c:when>
 												<c:when test="${question.type==9}">
 													<c:forEach var="answerOption" items="${question.answerOptions}" varStatus="status">
-														<input type="checkbox" disabled="disabled" id="${elementIdPrefix}checkbox-record${recordStatus.index+1}-question${questionStatus.index+1}-${status.index+1}">${answerOption.answerOption}</input><br />
+														<input type="checkbox" disabled="disabled" id="${elementIdPrefix}checkbox-record${recordStatus.index+1}-question${questionStatus.index+1}-${status.index+1}"><c:out value="${answerOption.answerOption}" escapeXml="true"/></input><br />
 													</c:forEach>
 												</c:when>
 												<c:when test="${question.type==10}">
@@ -316,4 +316,4 @@
 		</c:choose>
 	</c:otherwise>
 </c:choose>
-</div>
\ No newline at end of file
+</div>
Index: lams_tool_daco/web/pages/learning/listRecordsHorizontalPart.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/learning/listRecordsHorizontalPart.jsp,v
diff -u -r1.8 -r1.9
--- lams_tool_daco/web/pages/learning/listRecordsHorizontalPart.jsp	7 Jan 2013 10:04:32 -0000	1.8
+++ lams_tool_daco/web/pages/learning/listRecordsHorizontalPart.jsp	27 Mar 2014 13:57:45 -0000	1.9
@@ -197,7 +197,7 @@
 																checked="checked"
 																</c:if>
 																>
-																${answerOption.answerOption}</input><br />
+																<c:out value="${answerOption.answerOption}" escapeXml="true"/></input><br />
 															</c:forEach>
 														</td>
 													</tr>
@@ -211,7 +211,7 @@
 													<c:otherwise>
 														<c:forEach var="answerOption" items="${question.answerOptions}" varStatus="status">
 															<c:if test="${status.index+1==answer.answer}">
-																<fmt:message key="label.learning.dropdown.selected" /> ${answerOption.answerOption}
+																<fmt:message key="label.learning.dropdown.selected" /> <c:out value="${answerOption.answerOption}" escapeXml="true"/>
 															</c:if>
 														</c:forEach>
 													</c:otherwise>
@@ -226,7 +226,7 @@
 																	</td>
 																	<td>
 																</c:if>
-																<input type="checkbox" disabled="disabled" id="checkbox-record${recordStatus.index+1}-question${questionStatus.index+1}-${status.index+1}">${answerOption.answerOption}</input><br />
+																<input type="checkbox" disabled="disabled" id="checkbox-record${recordStatus.index+1}-question${questionStatus.index+1}-${status.index+1}"><c:out value="${answerOption.answerOption}" escapeXml="true"/></input><br />
 															</c:forEach>
 														</td>
 													</tr>
@@ -276,4 +276,4 @@
 		</c:forEach>
 	</table>
 </body>
-</lams:html>
\ No newline at end of file
+</lams:html>
Index: lams_tool_daco/web/pages/learning/notebook.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/learning/notebook.jsp,v
diff -u -r1.6 -r1.7
--- lams_tool_daco/web/pages/learning/notebook.jsp	9 Apr 2013 12:45:49 -0000	1.6
+++ lams_tool_daco/web/pages/learning/notebook.jsp	27 Mar 2014 13:57:45 -0000	1.7
@@ -27,13 +27,13 @@
 		
 		<div id="content">
 			<h1>
-				${daco.title}
+				<c:out value="${daco.title}" escapeXml="true"/>
 			</h1>
 
 			<%@ include file="/common/messages.jsp"%>
 
 			<p>
-				<lams:out value="${daco.reflectInstructions}" />
+				<lams:out value="${daco.reflectInstructions}" escapeHtml="true" />
 			</p>
 
 			<html:textarea cols="60" rows="8" property="entryText"
Index: lams_tool_daco/web/pages/learning/questionSummaries.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/learning/questionSummaries.jsp,v
diff -u -r1.4 -r1.5
--- lams_tool_daco/web/pages/learning/questionSummaries.jsp	12 Aug 2008 01:43:04 -0000	1.4
+++ lams_tool_daco/web/pages/learning/questionSummaries.jsp	27 Mar 2014 13:57:45 -0000	1.5
@@ -26,11 +26,11 @@
 	<table>
 		<tr>
 			<td>
-			<h1>${daco.title}</h1>
+			<h1><c:out value="${daco.title}" escapeXml="true"/></h1>
 			</td>
 		</tr>
 		<tr>
-			<td>${daco.instructions}</td>
+			<td><c:out value="${daco.instructions}" escapeXml="false"/></td>
 		</tr>
 	</table>
 </c:if>
@@ -47,7 +47,7 @@
 				<fmt:message key="label.learning.tableheader.summary.learner" />
 			</c:when>
 			<c:otherwise>
-				${userFullName}
+				<c:out value="${userFullName}" escapeXml="true"/>
 			</c:otherwise>
 		</c:choose>
 		</th>
@@ -69,7 +69,7 @@
 		<tr>
 			<td>
 				<div class="bigNumber">${questionStatus.index+1}</div>
-				${question.description}
+				<c:out value="${question.description}" escapeXml="false"/>
 				<div class="hint">
 					<c:choose>
 						<c:when test="${question.summary==1}">
@@ -227,4 +227,4 @@
 		<a href="#" class="button" onclick="javascript:refreshQuestionSummaries('${sessionMapID}')"><fmt:message key="label.common.summary.refresh" /></a>
 	</p>
 </c:if>
-</div>
\ No newline at end of file
+</div>
Index: lams_tool_daco/web/pages/monitoring/editactivity.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/monitoring/editactivity.jsp,v
diff -u -r1.3 -r1.4
--- lams_tool_daco/web/pages/monitoring/editactivity.jsp	8 Aug 2008 08:10:22 -0000	1.3
+++ lams_tool_daco/web/pages/monitoring/editactivity.jsp	27 Mar 2014 13:57:45 -0000	1.4
@@ -15,7 +15,7 @@
 			:
 		</td>
 		<td>
-			<c:out value="${daco.title}" escapeXml="false" />
+			<c:out value="${daco.title}" escapeXml="true" />
 		</td>
 	</tr>
 
@@ -41,4 +41,4 @@
 			</td>
 		</tr>
 	</c:if>
-</table>
\ No newline at end of file
+</table>
Index: lams_tool_daco/web/pages/monitoring/notebook.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/monitoring/notebook.jsp,v
diff -u -r1.2 -r1.3
--- lams_tool_daco/web/pages/monitoring/notebook.jsp	8 Aug 2008 08:10:22 -0000	1.2
+++ lams_tool_daco/web/pages/monitoring/notebook.jsp	27 Mar 2014 13:57:45 -0000	1.3
@@ -27,14 +27,14 @@
 				<table class="alternative-color" cellspacing="0">
 					<tr>
 						<th class="first">
-							<lams:out value="${daco.reflectInstructions}"/>
+							<lams:out value="${daco.reflectInstructions}" escapeHtml="true"/>
 						</th>
 					</tr>
 					<tr>
 						<td>
 							<c:choose>
 								<c:when test="${not empty user.reflectionEntry}">
-									<lams:out value="${user.reflectionEntry}"/>
+									<lams:out value="${user.reflectionEntry}" escapeHtml="true"/>
 								</c:when>
 								<c:otherwise>
 									<fmt:message key="message.no.reflection.available" />
Index: lams_tool_daco/web/pages/monitoring/summary.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_daco/web/pages/monitoring/summary.jsp,v
diff -u -r1.9 -r1.10
--- lams_tool_daco/web/pages/monitoring/summary.jsp	19 Dec 2012 16:37:55 -0000	1.9
+++ lams_tool_daco/web/pages/monitoring/summary.jsp	27 Mar 2014 13:57:45 -0000	1.10
@@ -121,7 +121,7 @@
 					<fmt:message key="label.monitoring.advancedsettings.notebookinstructions" />
 				</td>
 				<td>
-					${daco.reflectInstructions}	
+					<lams:out value="${daco.reflectInstructions}" escapeHtml="true"/>
 				</td>
 			</tr>
 		</c:if>
@@ -219,4 +219,4 @@
 		</html:link>
 		
 	</c:if>
-</p>
\ No newline at end of file
+</p>