Index: lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/LearningAction.java
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/LearningAction.java,v
diff -u -r1.4 -r1.5
--- lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/LearningAction.java	31 Aug 2015 12:43:19 -0000	1.4
+++ lams_tool_preview/src/java/org/lamsfoundation/lams/tool/peerreview/web/action/LearningAction.java	21 Oct 2015 12:46:03 -0000	1.5
@@ -433,7 +433,7 @@
 	    for (ItemRatingCriteriaDTO criteriaDto : itemRatingDto.getCriteriaDtos()) {
 		JSONObject criteriasRow = new JSONObject();
 		criteriasRow.put("ratingCriteriaId", criteriaDto.getRatingCriteria().getRatingCriteriaId());
-		criteriasRow.put("title", StringEscapeUtils.escapeCsv(criteriaDto.getRatingCriteria().getTitle()));
+		criteriasRow.put("title", StringEscapeUtils.escapeHtml(criteriaDto.getRatingCriteria().getTitle()));
 		criteriasRow.put("averageRating", criteriaDto.getAverageRating());
 		criteriasRow.put("numberOfVotes", criteriaDto.getNumberOfVotes());
 		criteriasRow.put("userRating", criteriaDto.getUserRating());
Index: lams_tool_preview/web/WEB-INF/tags/AuthoringRatingCriteria.tag
===================================================================
RCS file: /usr/local/cvsroot/lams_tool_preview/web/WEB-INF/tags/AuthoringRatingCriteria.tag,v
diff -u -r1.1 -r1.2
--- lams_tool_preview/web/WEB-INF/tags/AuthoringRatingCriteria.tag	24 Jul 2015 00:34:29 -0000	1.1
+++ lams_tool_preview/web/WEB-INF/tags/AuthoringRatingCriteria.tag	21 Oct 2015 12:46:03 -0000	1.2
@@ -255,7 +255,7 @@
 					
 					<td class="criteria-info">
 						<input type="hidden" name="criteriaOrderId${criteria.orderId}" value="${criteria.orderId}">
-						<input type="text" name="criteriaTitle${criteria.orderId}" value="${criteria.title}">
+						<input type="text" name="criteriaTitle${criteria.orderId}" value="${fn:escapeXml(criteria.title)}">
 					</td>
 					
 					<td width="40px">
@@ -349,4 +349,4 @@
 	</div>
 	
 </div>
-<!-- end tab content -->
\ No newline at end of file
+<!-- end tab content -->