--- loncom/interface/spreadsheet/Spreadsheet.pm	2004/02/24 20:47:14	1.36
+++ loncom/interface/spreadsheet/Spreadsheet.pm	2004/03/31 05:24:00	1.37
@@ -1,5 +1,5 @@
 #
-# $Id: Spreadsheet.pm,v 1.36 2004/02/24 20:47:14 matthew Exp $
+# $Id: Spreadsheet.pm,v 1.37 2004/03/31 05:24:00 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -1294,7 +1294,7 @@ sub html_editable_cell {
     } elsif ($value =~ /^\s*$/ ) {
         $value = '<font color="'.$bgcolor.'">#</font>';
     } else {
-        $value = &HTML::Entities::encode($value) if ($value !~/&nbsp;/);
+        $value = &HTML::Entities::encode($value,'<>&"') if ($value !~/&nbsp;/);
     }
     return $value if (! $allowed);
     #
@@ -1317,7 +1317,7 @@ sub html_editable_cell {
 sub html_uneditable_cell {
     my ($cell,$bgcolor) = @_;
     my $value = (defined($cell) ? $cell->{'value'} : '');
-    $value = &HTML::Entities::encode($value) if ($value !~/&nbsp;/);
+    $value = &HTML::Entities::encode($value,'<>&"') if ($value !~/&nbsp;/);
     return '&nbsp;'.$value.'&nbsp;';
 }