Index: lams_tool_mindmap/web/pages/learning/mindmap.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/learning/mindmap.jsp,v
diff -u -r1.15 -r1.16
--- lams_tool_mindmap/web/pages/learning/mindmap.jsp	9 Apr 2013 12:45:47 -0000	1.15
+++ lams_tool_mindmap/web/pages/learning/mindmap.jsp	29 Mar 2014 20:51:29 -0000	1.16
@@ -58,11 +58,11 @@
 
 <div id="content">
 	<h1>
-		${mindmapDTO.title}
+		<c:out value="${mindmapDTO.title}" escapeXml="true"/>
 	</h1>
 
 	<p>
-		${mindmapDTO.instructions}
+		<c:out value="${mindmapDTO.instructions}" escapeXml="false"/>
 	</p>
 
 	<c:if test="${mindmapDTO.lockOnFinish and mode == 'learner'}">
@@ -152,4 +152,4 @@
 		</c:choose>
 
 	</html:form>
-</div>
\ No newline at end of file
+</div>
Index: lams_tool_mindmap/web/pages/learning/reflect.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/learning/reflect.jsp,v
diff -u -r1.3 -r1.4
--- lams_tool_mindmap/web/pages/learning/reflect.jsp	9 Apr 2013 12:45:47 -0000	1.3
+++ lams_tool_mindmap/web/pages/learning/reflect.jsp	29 Mar 2014 20:51:29 -0000	1.4
@@ -12,11 +12,11 @@
 
 <div id="content">
 	<h1>
-		<c:out value="${reflectTitle}" escapeXml="false" />
+		<c:out value="${reflectTitle}" escapeXml="true" />
 	</h1>
 	<html:form action="/learning" method="post" onsubmit="disableFinishButton();" styleId="messageForm">
 		<p>
-			<lams:out value="${reflectInstructions}" />
+			<lams:out value="${reflectInstructions}" escapeHtml="true"/>
 		</p>
 		
 		<c:choose>
Index: lams_tool_mindmap/web/pages/monitoring/editActivity.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/monitoring/editActivity.jsp,v
diff -u -r1.3 -r1.4
--- lams_tool_mindmap/web/pages/monitoring/editActivity.jsp	17 Apr 2009 07:27:33 -0000	1.3
+++ lams_tool_mindmap/web/pages/monitoring/editActivity.jsp	29 Mar 2014 20:51:14 -0000	1.4
@@ -15,7 +15,7 @@
 				<fmt:message key="label.authoring.basic.title" />
 			</td>
 			<td>
-				<c:out value="${dto.title}" escapeXml="false" />
+				<c:out value="${dto.title}" escapeXml="true" />
 			</td>
 		</tr>
 		<tr>
Index: lams_tool_mindmap/web/pages/monitoring/reflect.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/monitoring/reflect.jsp,v
diff -u -r1.1 -r1.2
--- lams_tool_mindmap/web/pages/monitoring/reflect.jsp	14 Apr 2009 00:47:28 -0000	1.1
+++ lams_tool_mindmap/web/pages/monitoring/reflect.jsp	29 Mar 2014 20:51:14 -0000	1.2
@@ -1,14 +1,14 @@
 <%@ include file="/common/taglibs.jsp"%>
 
 	<h1>
-		<c:out value="${reflectTitle}" escapeXml="false" />
+		<c:out value="${reflectTitle}" escapeXml="true" />
 	</h1>
 	
 	<h2>
-		${mindmapUser}
+		<c:out value="${mindmapUser}" escapeXml="true"/>
 	</h2>
 	
-	<c:out value="${reflectEntry}" escapeXml="false" />
+	<c:out value="${reflectEntry}" escapeXml="true" />
 		
 	<div align="right" class="space-bottom-top">
 		<html:button styleClass="button" property="backButton" onclick="history.go(-1)">
Index: lams_tool_mindmap/web/pages/monitoring/summary.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/monitoring/summary.jsp,v
diff -u -r1.8 -r1.9
--- lams_tool_mindmap/web/pages/monitoring/summary.jsp	29 Sep 2012 13:57:11 -0000	1.8
+++ lams_tool_mindmap/web/pages/monitoring/summary.jsp	29 Mar 2014 20:51:14 -0000	1.9
@@ -35,84 +35,6 @@
 
 
 <c:set var="dto" value="${mindmapDTO}" />
-
-<h1 style="padding-bottom: 10px;">
-	<img src="<lams:LAMSURL/>/images/tree_closed.gif" id="treeIcon" onclick="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'), '<lams:LAMSURL/>');" />
-
-	<a href="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'),'<lams:LAMSURL/>');" >
-		<fmt:message key="monitor.summary.th.advancedSettings" />
-	</a>
-</h1>
-
-<div class="monitoring-advanced" id="advancedDiv" style="display:none">
-<table class="alternative-color">
-
-	<tr>
-		<td>
-			<fmt:message key="advanced.lockOnFinished" />
-		</td>
-		
-		<td>
-			<c:choose>
-				<c:when test="${dto.lockOnFinish}">
-					<fmt:message key="label.on" />
-				</c:when>
-				<c:otherwise>
-					<fmt:message key="label.off" />
-				</c:otherwise>
-			</c:choose>	
-		</td>
-	</tr>
-	
-	<tr>
-		<td>
-			<fmt:message key="advanced.multiUserMode" />
-		</td>
-		
-		<td>
-			<c:choose>
-				<c:when test="${dto.multiUserMode}">
-					<fmt:message key="label.on" />
-				</c:when>
-				<c:otherwise>
-					<fmt:message key="label.off" />
-				</c:otherwise>
-			</c:choose>	
-		</td>
-	</tr>
-	
-	<tr>
-		<td>
-			<fmt:message key="advanced.reflectOnActivity" />
-		</td>
-		
-		<td>
-			<c:choose>
-				<c:when test="${dto.reflectOnActivity}">
-					<fmt:message key="label.on" />
-				</c:when>
-				<c:otherwise>
-					<fmt:message key="label.off" />
-				</c:otherwise>
-			</c:choose>	
-		</td>
-	</tr>
-	
-	<tr>
-		<td>
-			<fmt:message key="label.notebookInstructions" />
-		</td>
-		
-		<td>
-			${dto.reflectInstructions}
-		</td>
-	</tr>
-	
-</table>
-</div>
-
-<%@include file="dateRestriction.jsp"%>
-
 <c:if test="${empty dto.sessionDTOs}">
 	<p class="warning">
 		<fmt:message key="label.nogroups" />
@@ -160,7 +82,7 @@
 						<c:forEach var="user" items="${session.userDTOs}">
 							<tr>
 								<td width="30%">
-									${user.firstName} ${user.lastName}
+									<c:out value="${user.firstName} ${user.lastName}" escapeXml="true"/>
 								</td>
 						
 								<td width="40%">
@@ -204,7 +126,7 @@
 				<c:forEach var="user" items="${session.userDTOs}">
 					<tr>
 						<td width="30%">
-							${user.firstName} ${user.lastName}
+							<c:out value="${user.firstName} ${user.lastName}" escapeXml="true"/>
 						</td>
 						
 						<td width="40%">
@@ -241,3 +163,85 @@
 
 	</table>
 </c:forEach>
+
+
+<div class="space-top">
+<h1 style="padding-bottom: 10px;">
+	<img src="<lams:LAMSURL/>/images/tree_closed.gif" id="treeIcon" onclick="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'), '<lams:LAMSURL/>');" />
+
+	<a href="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'),'<lams:LAMSURL/>');" >
+		<fmt:message key="monitor.summary.th.advancedSettings" />
+	</a>
+</h1>
+
+<div class="monitoring-advanced" id="advancedDiv" style="display:none">
+<table class="alternative-color">
+
+	<tr>
+		<td>
+			<fmt:message key="advanced.lockOnFinished" />
+		</td>
+		
+		<td>
+			<c:choose>
+				<c:when test="${dto.lockOnFinish}">
+					<fmt:message key="label.on" />
+				</c:when>
+				<c:otherwise>
+					<fmt:message key="label.off" />
+				</c:otherwise>
+			</c:choose>	
+		</td>
+	</tr>
+	
+	<tr>
+		<td>
+			<fmt:message key="advanced.multiUserMode" />
+		</td>
+		
+		<td>
+			<c:choose>
+				<c:when test="${dto.multiUserMode}">
+					<fmt:message key="label.on" />
+				</c:when>
+				<c:otherwise>
+					<fmt:message key="label.off" />
+				</c:otherwise>
+			</c:choose>	
+		</td>
+	</tr>
+	
+	<tr>
+		<td>
+			<fmt:message key="advanced.reflectOnActivity" />
+		</td>
+		
+		<td>
+			<c:choose>
+				<c:when test="${dto.reflectOnActivity}">
+					<fmt:message key="label.on" />
+				</c:when>
+				<c:otherwise>
+					<fmt:message key="label.off" />
+				</c:otherwise>
+			</c:choose>	
+		</td>
+	</tr>
+	  <c:if test="${dto.reflectOnActivity}">	
+		<tr>
+			<td>
+				<fmt:message key="label.notebookInstructions" />
+			</td>
+		
+			<td>
+				<lams:out value="${dto.reflectInstructions}" escapeHtml="true"/>
+			</td>
+		</tr>
+	 </c:if>
+	
+</table>
+</div>
+</div>
+<br/>
+<%@include file="dateRestriction.jsp"%>
+