--- loncom/interface/lonpickcourse.pm	2004/03/19 03:47:09	1.13
+++ loncom/interface/lonpickcourse.pm	2004/05/07 21:51:30	1.16
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Pick a course
 #
-# $Id: lonpickcourse.pm,v 1.13 2004/03/19 03:47:09 albertel Exp $
+# $Id: lonpickcourse.pm,v 1.16 2004/05/07 21:51:30 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -61,9 +61,8 @@ ENDDOCUMENT
                                                           'domainfilter',1);
 # description filter
     my $descriptfilter=$ENV{'form.descriptfilter'};
-    $descriptfilter=~s/[^\w\s]//g;
     unless ($descriptfilter) { $descriptfilter=''; }
-
+    my $listdescript=&HTML::Entities::encode($descriptfilter,'<>&"');
 # last course activity filter and selection
     my $sincefilter=$ENV{'form.sincefilter'};
     $sincefilter=~s/[^\d-]//g;
@@ -115,7 +114,7 @@ $lt{'cac'}: $sincefilterform
 $lt{'cdo'}: $domainselectform
 <br />
 $lt{'cde'}:
-<input type="text" name="descriptfilter" size="40" value="$descriptfilter" />
+<input type="text" name="descriptfilter" size="40" value="$listdescript" />
 <p><input type="submit" name="gosearch" value="Search" /></p>
 </form>
 <hr />
@@ -136,7 +135,7 @@ ENDSCRIPT
 	}
 	foreach my $description (sort(keys(%by_descrip))) {
 	    my $course=$by_descrip{$description};
-	    my $cleandesc=&HTML::Entities::encode($courses{$course});
+	    my $cleandesc=&HTML::Entities::encode($courses{$course},'<>&"');
 	    $cleandesc=~s/'/\\'/g;
 	    my ($cdom,$cnum)=split(/\_/,$course);
 	    $r->print('<input type="button" value="Select" onClick="gochoose('.