--- loncom/homework/matchresponse.pm	2013/04/30 03:03:34	1.89
+++ loncom/homework/matchresponse.pm	2014/02/27 14:41:34	1.90
@@ -1,7 +1,7 @@
 # The LearningOnline Network with CAPA
 # Full matching style response
 #
-# $Id: matchresponse.pm,v 1.89 2013/04/30 03:03:34 raeburn Exp $
+# $Id: matchresponse.pm,v 1.90 2014/02/27 14:41:34 bisitz Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -580,7 +580,7 @@ sub format_prior_answer {
     my $output;
     
     foreach my $name (@{ $foil_order }) {
-	my $item=shift(@items);
+	my $item = &HTML::Entities::encode(shift(@items),'<>&"');
 	$output .= '<tr><td>'.$item.'</td></tr>';
     }
     return if (!defined($output));