- <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${entry.title} </font></td>
- <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${entry.description} </font></td>
+ <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${encodeHTML(entry.title)} </font></td>
+ <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${encodeHTML(entry.description)} </font></td>