--- loncom/interface/lonsyllabus.pm	2006/08/01 13:55:07	1.53
+++ loncom/interface/lonsyllabus.pm	2006/08/16 19:40:46	1.54
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Syllabus
 #
-# $Id: lonsyllabus.pm,v 1.53 2006/08/01 13:55:07 albertel Exp $
+# $Id: lonsyllabus.pm,v 1.54 2006/08/16 19:40:46 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -38,6 +38,7 @@ use Apache::lonannounce;
 use Apache::lonlocal;
 use Apache::lonhtmlcommon;
 use Apache::lonspeller();
+use HTML::Entities();
 
 sub handler {
     my $r = shift;
@@ -321,7 +322,7 @@ sub handler {
               if ($allowed) {
                  $r->print(
 	   '<br /><textarea cols="80" rows="12" name="'.$_.'" id="'.$_.'">'.
-			   $syllabus{$_}.
+			   &HTML::Entities::encode($syllabus{$_},'"&<>').
            '</textarea> <input type="submit" name="storesyl" value="Store" />');
 	      }
 	  }