--- loncom/interface/lonpickcourse.pm	2004/03/31 05:24:00	1.14
+++ loncom/interface/lonpickcourse.pm	2004/05/07 21:51:30	1.16
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Pick a course
 #
-# $Id: lonpickcourse.pm,v 1.14 2004/03/31 05:24:00 albertel Exp $
+# $Id: lonpickcourse.pm,v 1.16 2004/05/07 21:51:30 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -61,9 +61,8 @@ ENDDOCUMENT
                                                           'domainfilter',1);
 # description filter
     my $descriptfilter=$ENV{'form.descriptfilter'};
-    $descriptfilter=~s/[^\w\s]//g;
     unless ($descriptfilter) { $descriptfilter=''; }
-
+    my $listdescript=&HTML::Entities::encode($descriptfilter,'<>&"');
 # last course activity filter and selection
     my $sincefilter=$ENV{'form.sincefilter'};
     $sincefilter=~s/[^\d-]//g;
@@ -115,7 +114,7 @@ $lt{'cac'}: $sincefilterform
 $lt{'cdo'}: $domainselectform
 <br />
 $lt{'cde'}:
-<input type="text" name="descriptfilter" size="40" value="$descriptfilter" />
+<input type="text" name="descriptfilter" size="40" value="$listdescript" />
 <p><input type="submit" name="gosearch" value="Search" /></p>
 </form>
 <hr />