Index: openacs-4/packages/xotcl-core/tcl/chat-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/tcl/Attic/chat-procs.tcl,v
diff -u -r1.22 -r1.23
--- openacs-4/packages/xotcl-core/tcl/chat-procs.tcl	27 Apr 2015 15:28:21 -0000	1.22
+++ openacs-4/packages/xotcl-core/tcl/chat-procs.tcl	16 Jun 2015 20:35:32 -0000	1.23
@@ -230,7 +230,7 @@
       if {![info exists color]} {
         set color [my user_color $user_id]
       }
-      set creator "<a style='color:$color;' target='_blank' href='$url'>$name</a>"
+      set creator "<a style='color:$color;' target='_blank' href='[ns_quotehtml $url]'>$name</a>"
     } elseif { $user_id == 0 } {
       set creator "Nobody"
     } else {
Index: openacs-4/packages/xotcl-core/www/show-object.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-core/www/show-object.tcl,v
diff -u -r1.19 -r1.20
--- openacs-4/packages/xotcl-core/www/show-object.tcl	3 May 2015 08:37:08 -0000	1.19
+++ openacs-4/packages/xotcl-core/www/show-object.tcl	16 Jun 2015 20:35:32 -0000	1.20
@@ -274,7 +274,7 @@
   append output "</dl>\n"
 
   set url "/api-doc/procs-file-view?path=[ns_urlencode $doc_elements(script)]"
-  append output "Defined in <a href='$url'>$doc_elements(script)</a><p>"
+  append output "Defined in <a href='[ns_quotehtml $url]'>$doc_elements(script)</a><p>"
 
   array unset doc_elements
 }
Index: openacs-4/packages/xotcl-request-monitor/www/last-requests.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xotcl-request-monitor/www/last-requests.tcl,v
diff -u -r1.7 -r1.8
--- openacs-4/packages/xotcl-request-monitor/www/last-requests.tcl	27 Oct 2014 16:42:02 -0000	1.7
+++ openacs-4/packages/xotcl-request-monitor/www/last-requests.tcl	16 Jun 2015 20:37:02 -0000	1.8
@@ -18,10 +18,10 @@
 set hide_patterns [parameter::get -parameter hide-requests -default {*.css}]
 
 if {[string is integer $request_key]} {
-   acs_user::get -user_id $request_key -array user
-   set user_string "$user(first_names) $user(last_name)"
-   set tmp_url [acs_community_member_url -user_id $request_key]
-   append user_string " (<a href='$tmp_url'>$request_key</a>)" 
+    acs_user::get -user_id $request_key -array user
+    set user_string "$user(first_names) $user(last_name)"
+    set tmp_url [acs_community_member_url -user_id $request_key]
+    append user_string " (<a href='[ns_quotehtml $tmp_url]'>$request_key</a>)" 
 } else {
    set user_string $request_key 
 }