Index: lams_monitoring/web/emailnotifications/courseNotifications.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_monitoring/web/emailnotifications/courseNotifications.jsp,v
diff -u -r1.10 -r1.11
--- lams_monitoring/web/emailnotifications/courseNotifications.jsp	25 Jan 2013 14:44:42 -0000	1.10
+++ lams_monitoring/web/emailnotifications/courseNotifications.jsp	6 Apr 2014 22:06:53 -0000	1.11
@@ -111,7 +111,7 @@
 			jQuery("#lessonsTable").jqGrid('filterToolbar',{stringResult: true, searchOnEnter: true, defaultSearch: 'cn'});
 			
 			<c:forEach var="lesson" items="${lessons}" varStatus="i">
-				jQuery("#lessonsTable").jqGrid('addRowData',${lesson.lessonId}, {id2:'${lesson.lessonId}',name:'${lesson.lessonName}'});
+				jQuery("#lessonsTable").jqGrid('addRowData',${lesson.lessonId}, {id2:'${lesson.lessonId}',name:'${fn:escapeXml(lesson.lessonName)}'});
 			</c:forEach>
 			
 			$("#lessonsTable").parents('div.ui-jqgrid-bdiv').css("max-height","10000px");
@@ -253,7 +253,7 @@
 				</h3>
 				<select id="lessonId" onchange="getUsers();">
 					<c:forEach var="lesson" items="${lessons}">
-						<option <c:if test="${lesson.lessonId==firstLesson.lessonId}">selected="selected"</c:if> value="${lesson.lessonId}">${lesson.lessonName}</option>
+						<option <c:if test="${lesson.lessonId==firstLesson.lessonId}">selected="selected"</c:if> value="${lesson.lessonId}">${fn:escapeXml(lesson.lessonName)}</option>
 					</c:forEach>
 				</select>				
 			</div>
Index: lams_monitoring/web/emailnotifications/lessonNotifications.jsp
===================================================================
RCS file: /usr/local/cvsroot/lams_monitoring/web/emailnotifications/lessonNotifications.jsp,v
diff -u -r1.9 -r1.10
--- lams_monitoring/web/emailnotifications/lessonNotifications.jsp	4 Jul 2013 14:10:12 -0000	1.9
+++ lams_monitoring/web/emailnotifications/lessonNotifications.jsp	6 Apr 2014 22:06:53 -0000	1.10
@@ -12,7 +12,7 @@
 <lams:head>
 	<html:base/>
 	<link rel="shortcut icon" href="<lams:LAMSURL/>/favicon.ico" type="image/x-icon" />
-	<title><fmt:message key="${title}"/></title>
+	<title><fmt:message key="${fn:escapeXml(title)}"/></title>
 	
 	<lams:css style="learner"/>
 	<link type="text/css" href="<lams:LAMSURL/>css/jquery-ui-redmond-theme.css" rel="stylesheet">