--- loncom/interface/lonaboutme.pm	2006/08/08 17:24:07	1.51
+++ loncom/interface/lonaboutme.pm	2006/08/16 19:40:46	1.52
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # "About Me" Personal Information
 #
-# $Id: lonaboutme.pm,v 1.51 2006/08/08 17:24:07 albertel Exp $
+# $Id: lonaboutme.pm,v 1.52 2006/08/16 19:40:46 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -37,6 +37,7 @@ use Apache::lonfeedback;
 use Apache::lonrss();
 use Apache::lonlocal;
 use Apache::lonmsgdisplay();
+use HTML::Entities();
 
 sub handler {
     my $r = shift;
@@ -206,7 +207,7 @@ sub handler {
 	      }
               if ($allowed) {
                  $r->print('<br /><textarea cols="80" rows="6" name="'.$_.'">'.
-			   $syllabus{$_}.
+			   &HTML::Entities::encode($syllabus{$_},'"&<>').
            '</textarea><input type="submit" name="storesyl" value="'.
 			   &mt('Store').'" />');
 	      }