Index: lams_tool_pixlr/web/pages/export/exportPortfolio.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_pixlr/web/pages/export/exportPortfolio.jsp,v
diff -u -r1.3 -r1.4
--- lams_tool_pixlr/web/pages/export/exportPortfolio.jsp	13 Nov 2009 03:13:55 -0000	1.3
+++ lams_tool_pixlr/web/pages/export/exportPortfolio.jsp	3 Apr 2014 14:56:26 -0000	1.4
@@ -56,7 +56,7 @@
 
 <div id="content">
 
-<h1><c:out value="${pixlrDTO.title}" escapeXml="false" /></h1>
+<h1><c:out value="${pixlrDTO.title}" escapeXml="true" /></h1>
 
 <p><c:out value="${pixlrDTO.instructions}" escapeXml="false" /></p>
 
@@ -124,7 +124,7 @@
 						<c:if test="${pixlrDTO.reflectOnActivity}">
 							<td><c:choose>
 								<c:when test="${user.finishedReflection}">
-															${user.notebookEntry}
+															<lams:out value="${user.notebookEntry}" escapeHtml="true"/>
 														</c:when>
 								<c:otherwise>
 									<fmt:message key="label.notAvailable" />
@@ -141,7 +141,7 @@
 	<c:otherwise>
 		<br />
 		<h2>
-			${userDTO.firstName} ${userDTO.lastName}
+			<c:out value="${userDTO.firstName} ${userDTO.lastName}"/>
 		</h2>
 		<c:choose>
 			<c:when
@@ -161,13 +161,13 @@
 			</h2>
 			
 			<h4>
-				${pixlrDTO.reflectInstructions}
+				<lams:out value="${pixlrDTO.reflectInstructions}" escapeHtml="true"/>
 			</h4>
 			
 			<c:choose>
 				<c:when test="${userDTO.finishedReflection}">
 					<p>
-						${userDTO.notebookEntry}
+						<lams:out value="${userDTO.notebookEntry}" escapeHtml="true"/>
 					</p>
 				</c:when>
 				<c:otherwise>
Index: lams_tool_pixlr/web/pages/learning/notebook.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_pixlr/web/pages/learning/notebook.jsp,v
diff -u -r1.7 -r1.8
--- lams_tool_pixlr/web/pages/learning/notebook.jsp	9 Apr 2013 12:46:29 -0000	1.7
+++ lams_tool_pixlr/web/pages/learning/notebook.jsp	3 Apr 2014 14:56:26 -0000	1.8
@@ -36,15 +36,15 @@
 			<div id="content">
 			
 			<h1>
-				${pixlrDTO.title}
+				<c:out value="${pixlrDTO.title}" escapeXml="true"/>
 			</h1>
 		
 			<html:form action="/learning" method="post" onsubmit="disableFinishButton();" styleId="messageForm">
 				<html:hidden property="toolSessionID" styleId="toolSessionID"/>
 				<html:hidden property="mode" value="${mode}" />
 				
 				<p class="small-space-top">
-					<lams:out value="${pixlrDTO.reflectInstructions}" />
+					<lams:out value="${pixlrDTO.reflectInstructions}" escapeHtml="true"/>
 				</p>
 		
 				<html:textarea cols="60" rows="8" property="entryText"
Index: lams_tool_pixlr/web/pages/learning/pixlr.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_pixlr/web/pages/learning/pixlr.jsp,v
diff -u -r1.5 -r1.6
--- lams_tool_pixlr/web/pages/learning/pixlr.jsp	13 Nov 2009 03:13:55 -0000	1.5
+++ lams_tool_pixlr/web/pages/learning/pixlr.jsp	3 Apr 2014 14:56:26 -0000	1.6
@@ -28,11 +28,11 @@
 
 <div id="content">
 	<h1>
-		${pixlrDTO.title}
+		<c:out value="${pixlrDTO.title}" escapeXml="true"/>
 	</h1>
 
 	<p>
-		${pixlrDTO.instructions}
+		<c:out value="${pixlrDTO.instructions}" escapeXml="false"/>
 	</p>
 
 	<c:if test="${pixlrDTO.lockOnFinish and mode == 'learner'}">
Index: lams_tool_pixlr/web/pages/learning/viewAll.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_pixlr/web/pages/learning/viewAll.jsp,v
diff -u -r1.8 -r1.9
--- lams_tool_pixlr/web/pages/learning/viewAll.jsp	9 Apr 2013 12:46:29 -0000	1.8
+++ lams_tool_pixlr/web/pages/learning/viewAll.jsp	3 Apr 2014 14:56:26 -0000	1.9
@@ -40,7 +40,7 @@
 			<div id="content">
 			
 			<h1>
-				${pixlrDTO.title}
+				<c:out value="${pixlrDTO.title}" escapeXml="true"/>
 			</h1>
 		
 			<html:form action="/learning" method="post" styleId="messageForm">
@@ -58,7 +58,7 @@
 								<tr>
 									<td width="30%">
 										<a href="javascript:openPopup('${pixlrImageFolderURL}/${learner.imageFileName}', ${learner.imageHeight}, ${learner.imageWidth})">
-										${learner.firstName} ${learner.lastName}
+										<c:out value="${learner.firstName} ${learner.lastName}" escapeXml="true"/>
 										</a>
 									</td>
 									<td>
Index: lams_tool_pixlr/web/pages/monitoring/editActivity.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_pixlr/web/pages/monitoring/editActivity.jsp,v
diff -u -r1.1 -r1.2
--- lams_tool_pixlr/web/pages/monitoring/editActivity.jsp	7 Jan 2009 22:37:48 -0000	1.1
+++ lams_tool_pixlr/web/pages/monitoring/editActivity.jsp	3 Apr 2014 14:56:26 -0000	1.2
@@ -15,7 +15,7 @@
 				<fmt:message key="label.authoring.basic.title" />
 			</td>
 			<td>
-				<c:out value="${dto.title}" escapeXml="false" />
+				<c:out value="${dto.title}" escapeXml="true" />
 			</td>
 		</tr>
 		<tr>
Index: lams_tool_pixlr/web/pages/monitoring/summary.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_pixlr/web/pages/monitoring/summary.jsp,v
diff -u -r1.3 -r1.4
--- lams_tool_pixlr/web/pages/monitoring/summary.jsp	10 Feb 2011 23:10:17 -0000	1.3
+++ lams_tool_pixlr/web/pages/monitoring/summary.jsp	3 Apr 2014 14:56:26 -0000	1.4
@@ -12,82 +12,12 @@
 </script>
 
 <h1>
-	<img src="<lams:LAMSURL/>/images/tree_closed.gif" id="treeIcon" onclick="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'), '<lams:LAMSURL/>');" />
-
-	<a href="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'),'<lams:LAMSURL/>');" >
-		<fmt:message key="monitor.summary.th.advancedSettings" />
-	</a>
+	<c:out value="${dto.title}" escapeXml="true" />
 </h1>
-<br />
-
-<div class="monitoring-advanced" id="advancedDiv" style="display:none">
-<table class="alternative-color">
-
-	<tr>
-		<td>
-			<fmt:message key="advanced.lockOnFinished" />
-		</td>
-		
-		<td>
-			<c:choose>
-				<c:when test="${dto.lockOnFinish}">
-					<fmt:message key="label.on" />
-				</c:when>
-				<c:otherwise>
-					<fmt:message key="label.off" />
-				</c:otherwise>
-			</c:choose>	
-		</td>
-	</tr>
-	<tr>
-		<td>
-			<fmt:message key="advanced.allowViewOthersImages" />
-		</td>
-		
-		<td>
-			<c:choose>
-				<c:when test="${dto.allowViewOthersImages}">
-					<fmt:message key="label.on" />
-				</c:when>
-				<c:otherwise>
-					<fmt:message key="label.off" />
-				</c:otherwise>
-			</c:choose>	
-		</td>
-	</tr>
-	<tr>
-		<td>
-			<fmt:message key="monitor.summary.td.addNotebook" />
-		</td>
-		
-		<td>
-			<c:choose>
-				<c:when test="${dto.reflectOnActivity == true}">
-					<fmt:message key="label.on" />
-				</c:when>
-				<c:otherwise>
-					<fmt:message key="label.off" />
-				</c:otherwise>
-			</c:choose>	
-		</td>
-	</tr>
-	
-	<c:choose>
-		<c:when test="${dto.reflectOnActivity == true}">
-			<tr>
-				<td>
-					<fmt:message key="monitor.summary.td.notebookInstructions" />
-				</td>
-				<td>
-					${dto.reflectInstructions}	
-				</td>
-			</tr>
-		</c:when>
-	</c:choose>
-</table>
+<div class="instructions small-space-top">
+	<c:out value="${dto.instructions}" escapeXml="false" />	
 </div>
-
-
+<br/>
 <html:form action="/monitoring" method="post" styleId="monitoringForm">
 	
 	<html:hidden property="dispatch" styleId="dispatch" value="toggleHideImage" />
@@ -127,7 +57,7 @@
 				<tr>
 					<td>
 						<a href="javascript:openPopup('${pixlrImageFolderURL}/${user.imageFileName}', ${user.imageHeight}, ${user.imageWidth})">
-							${user.firstName} ${user.lastName}
+							<c:out value="${user.firstName} ${user.lastName}" escapeXml="true"/>
 						</a>
 					</td>
 					<td align="center">
@@ -163,7 +93,7 @@
 						<td >
 							<c:choose>
 								<c:when test="${user.finishedReflection}">
-									${user.notebookEntry}
+									<lams:out escapeHtml="true" value="${user.notebookEntry}" />
 								</c:when>
 								<c:otherwise>
 									<fmt:message key="label.notAvailable" />
@@ -178,3 +108,81 @@
 	</c:forEach>
 
 </html:form>
+
+
+<h1>
+	<img src="<lams:LAMSURL/>/images/tree_closed.gif" id="treeIcon" onclick="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'), '<lams:LAMSURL/>');" />
+
+	<a href="javascript:toggleAdvancedOptionsVisibility(document.getElementById('advancedDiv'), document.getElementById('treeIcon'),'<lams:LAMSURL/>');" >
+		<fmt:message key="monitor.summary.th.advancedSettings" />
+	</a>
+</h1>
+<br />
+
+<div class="monitoring-advanced" id="advancedDiv" style="display:none">
+<table class="alternative-color">
+
+	<tr>
+		<td>
+			<fmt:message key="advanced.lockOnFinished" />
+		</td>
+		
+		<td>
+			<c:choose>
+				<c:when test="${dto.lockOnFinish}">
+					<fmt:message key="label.on" />
+				</c:when>
+				<c:otherwise>
+					<fmt:message key="label.off" />
+				</c:otherwise>
+			</c:choose>	
+		</td>
+	</tr>
+	<tr>
+		<td>
+			<fmt:message key="advanced.allowViewOthersImages" />
+		</td>
+		
+		<td>
+			<c:choose>
+				<c:when test="${dto.allowViewOthersImages}">
+					<fmt:message key="label.on" />
+				</c:when>
+				<c:otherwise>
+					<fmt:message key="label.off" />
+				</c:otherwise>
+			</c:choose>	
+		</td>
+	</tr>
+	<tr>
+		<td>
+			<fmt:message key="monitor.summary.td.addNotebook" />
+		</td>
+		
+		<td>
+			<c:choose>
+				<c:when test="${dto.reflectOnActivity == true}">
+					<fmt:message key="label.on" />
+				</c:when>
+				<c:otherwise>
+					<fmt:message key="label.off" />
+				</c:otherwise>
+			</c:choose>	
+		</td>
+	</tr>
+	
+	<c:choose>
+		<c:when test="${dto.reflectOnActivity == true}">
+			<tr>
+				<td>
+					<fmt:message key="monitor.summary.td.notebookInstructions" />
+				</td>
+				<td>
+					<lams:out value="${dto.reflectInstructions}" escapeHtml="true"/>	
+				</td>
+			</tr>
+		</c:when>
+	</c:choose>
+</table>
+</div>
+