Index: lams_tool_mindmap/web/pages/authoring/authoring.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/authoring/authoring.jsp,v
diff -u -r1.9 -r1.10
--- lams_tool_mindmap/web/pages/authoring/authoring.jsp	17 Jan 2014 22:06:37 -0000	1.9
+++ lams_tool_mindmap/web/pages/authoring/authoring.jsp	5 Apr 2014 13:45:32 -0000	1.10
@@ -8,8 +8,13 @@
 
 <script type="text/javascript">
 //<![CDATA[  
-	flashvars = { xml: "${mindmapContentPath}", user: "${currentMindmapUser}", dictionary: "${localizationPath}" }
+           
+    <c:set var="MindmapUser">
+		<c:out value="${currentMindmapUser}" escapeXml="true"/>
+	</c:set>
 	
+	flashvars = { xml: "${mindmapContentPath}", user: "${MindmapUser}", dictionary: "${localizationPath}" }
+	
 	$(window).resize(makeNice);
 	
 	embedFlashObject(700, 525);
Index: lams_tool_mindmap/web/pages/export/exportPortfolioMultimode.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/export/exportPortfolioMultimode.jsp,v
diff -u -r1.3 -r1.4
--- lams_tool_mindmap/web/pages/export/exportPortfolioMultimode.jsp	18 May 2009 08:07:41 -0000	1.3
+++ lams_tool_mindmap/web/pages/export/exportPortfolioMultimode.jsp	5 Apr 2014 13:45:32 -0000	1.4
@@ -7,9 +7,14 @@
 <script type="text/javascript" src="jquery.js"></script>
 
 <script type="text/javascript">
+
 <!--
-	flashvars = { xml: "${mindmapContentPath}", user: "${currentMindmapUser}", dictionary: "${localizationPath}" }
+	<c:set var="MindmapUser">
+		<c:out value="${currentMindmapUser}" escapeXml="true"/>
+	</c:set>
 	
+	flashvars = { xml: "${mindmapContentPath}", user: "${MindmapUser}", dictionary: "${localizationPath}" }
+	
 	$(window).resize(makeNice);
 
 	embedFlashObject(700, 525);
Index: lams_tool_mindmap/web/pages/export/exportPortfolioSinglemode.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/export/exportPortfolioSinglemode.jsp,v
diff -u -r1.2 -r1.3
--- lams_tool_mindmap/web/pages/export/exportPortfolioSinglemode.jsp	18 May 2009 08:07:41 -0000	1.2
+++ lams_tool_mindmap/web/pages/export/exportPortfolioSinglemode.jsp	5 Apr 2014 13:45:32 -0000	1.3
@@ -8,7 +8,11 @@
 
 <script type="text/javascript">
 <!--
-	flashvars = { xml: "${mindmapContentPath}", user: "${currentMindmapUser}", dictionary: "${localizationPath}" }
+	<c:set var="MindmapUser">
+		<c:out value="${currentMindmapUser}" escapeXml="true"/>
+	</c:set>
+
+	flashvars = { xml: "${mindmapContentPath}", user: "${MindmapUser}", dictionary: "${localizationPath}" }
 	
 	$(window).resize(makeNice);
 
Index: lams_tool_mindmap/web/pages/learning/mindmap.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/learning/mindmap.jsp,v
diff -u -r1.16 -r1.17
--- lams_tool_mindmap/web/pages/learning/mindmap.jsp	29 Mar 2014 20:51:29 -0000	1.16
+++ lams_tool_mindmap/web/pages/learning/mindmap.jsp	5 Apr 2014 13:45:32 -0000	1.17
@@ -35,7 +35,11 @@
 		disableFinishButton();
 	}
 	
-	flashvars = { xml: "${mindmapContentPath}", user: "${currentMindmapUser}", 
+	<c:set var="MindmapUser">
+		<c:out value="${currentMindmapUser}" escapeXml="true"/>
+	</c:set>
+	
+	flashvars = { xml: "${mindmapContentPath}", user: "${MindmapUser}", 
 				  pollServer: "${pollServerParam}", notifyServer: "${notifyServerParam}",
 				  dictionary: "${localizationPath}" }
 	
Index: lams_tool_mindmap/web/pages/monitoring/mindmapDisplay.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_mindmap/web/pages/monitoring/mindmapDisplay.jsp,v
diff -u -r1.7 -r1.8
--- lams_tool_mindmap/web/pages/monitoring/mindmapDisplay.jsp	10 Dec 2012 11:11:05 -0000	1.7
+++ lams_tool_mindmap/web/pages/monitoring/mindmapDisplay.jsp	5 Apr 2014 13:45:32 -0000	1.8
@@ -6,8 +6,13 @@
 
 <script type="text/javascript">
 //<![CDATA[
-	flashvars = { xml: "${mindmapContentPath}", user: "${currentMindmapUser}", dictionary: "${localizationPath}" }
+           
+    <c:set var="MindmapUser">
+		<c:out value="${currentMindmapUser}" escapeXml="true"/>
+	</c:set>
 	
+	flashvars = { xml: "${mindmapContentPath}", user: "${MindmapUser}", dictionary: "${localizationPath}" }
+
 	embedFlashObject(700, 525);
 
 	$(window).resize(makeNice);
Index: lams_tool_scratchie/web/pages/learning/learning.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_scratchie/web/pages/learning/learning.jsp,v
diff -u -r1.17 -r1.18
--- lams_tool_scratchie/web/pages/learning/learning.jsp	1 Apr 2014 02:28:49 -0000	1.17
+++ lams_tool_scratchie/web/pages/learning/learning.jsp	5 Apr 2014 13:49:35 -0000	1.18
@@ -105,7 +105,7 @@
 		
 		<h4>
 			<fmt:message key="label.group.leader" >
-				<fmt:param>${sessionMap.groupLeaderName}</fmt:param>
+				<fmt:param><c:out value="${sessionMap.groupLeaderName}" escapeXml="true"/></fmt:param>
 			</fmt:message>
 		</h4>