Index: lams_central/web/emailuser.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_central/web/emailuser.jsp,v
diff -u -r1.1 -r1.2
--- lams_central/web/emailuser.jsp	4 Jul 2013 11:35:28 -0000	1.1
+++ lams_central/web/emailuser.jsp	6 Apr 2014 20:15:35 -0000	1.2
@@ -83,7 +83,7 @@
 					<tr>
 						<td><fmt:message key="email.to" /></td>
 						 <c:if test="${not empty user}">
-							<td>${user.firstName} ${user.lastName} &lt;${user.email}&gt;</td>
+							<td><c:out value="${user.firstName} ${user.lastName} &lt;${user.email}&gt;"/></td>
 						 </c:if>
 					</tr>
 
Index: lams_central/web/findUserLessons.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_central/web/findUserLessons.jsp,v
diff -u -r1.9 -r1.10
--- lams_central/web/findUserLessons.jsp	27 Dec 2012 15:51:35 -0000	1.9
+++ lams_central/web/findUserLessons.jsp	6 Apr 2014 20:15:35 -0000	1.10
@@ -82,12 +82,12 @@
 		</fmt:message></h1>
 
 		<c:forEach var="user" items="${userLessonsMap}">
-			<div><strong>${user.key.firstName}
-			${user.key.lastName}</strong> <c:choose>
+			<div><strong><c:out value="${user.key.firstName}
+			${user.key.lastName}"/></strong> <c:choose>
 				<c:when test="${user.value ne null and not empty user.value}">
 					<ul>
 						<c:forEach var="lessonDto" items="${user.value}">
-							<li>${lessonDto.lessonName} 
+							<li><c:out value="${lessonDto.lessonName}" escapeXml="true"/>
 								<c:if test="${lessonDto.displayMonitor}">
 								<a href="javascript:openMonitorLesson(${lessonDto.lessonID})">
 								<fmt:message key="index.monitor" /></a>
@@ -105,4 +105,4 @@
 		</c:forEach>
 	</c:otherwise>
 </c:choose></div>
-</lams:html>
\ No newline at end of file
+</lams:html>
Index: lams_tool_lamc/web/monitoring/Reflections.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_lamc/web/monitoring/Reflections.jsp,v
diff -u -r1.6 -r1.7
--- lams_tool_lamc/web/monitoring/Reflections.jsp	3 Apr 2014 03:56:58 -0000	1.6
+++ lams_tool_lamc/web/monitoring/Reflections.jsp	6 Apr 2014 20:06:50 -0000	1.7
@@ -17,15 +17,15 @@
 					  	 		<c:set var="reflectionUid" scope="request" value="${currentDto.reflectionUid}"/>
 								<tr>			
 									<td valign=top class="align-left">
-										 <c:out value="${userName}" escapeXml="false"/> 
+										 <c:out value="${userName}" escapeXml="true"/> 
 									 </td>
 	
 									<td valign=top class="align-right">
 										<c:url value="monitoring.do" var="openNotebook">
 											<c:param name="dispatch" value="openNotebook" />
 											<c:param name="uid" value="${reflectionUid}" />
 											<c:param name="userId" value="${userId}" />
-											<c:param name="userName" value="${userName}" />
+											<c:param name="userName" value="${fn:escapeXml(userName)}" />
 											<c:param name="sessionId" value="${sessionId}" />													
 											<c:param name="contentFolderID" value="${McMonitoringForm.contentFolderID}" />																								
 										</c:url>
Index: lams_tool_lamc/web/monitoring/SummaryContent.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_lamc/web/monitoring/SummaryContent.jsp,v
diff -u -r1.38 -r1.39
--- lams_tool_lamc/web/monitoring/SummaryContent.jsp	3 Apr 2014 03:56:58 -0000	1.38
+++ lams_tool_lamc/web/monitoring/SummaryContent.jsp	6 Apr 2014 20:08:36 -0000	1.39
@@ -79,7 +79,7 @@
    	     		jQuery("#group${sessionMarkDto.sessionId}").addRowData(${i.index + 1}, {
    	   	     		id:"${i.index + 1}",
    	   	     		userUid:"${mcUserMarkDTO.queUsrId}",
-   	   	     		userName:"${mcUserMarkDTO.fullName} <c:if test='${mcUserMarkDTO.userGroupLeader}'>( <fmt:message key='label.monitoring.group.leader' />)</c:if>",
+   	   	     		userName:"${fn:escapeXml(mcUserMarkDTO.fullName)} <c:if test='${mcUserMarkDTO.userGroupLeader}'>( <fmt:message key='label.monitoring.group.leader' />)</c:if>",
    	   	     		total:"${mcUserMarkDTO.totalMark}"
    	   	   	    });
 	        </c:forEach>