<td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
<B>${lang("breaking.text")}:</B> ${lang("breaking.textinfo")}</font></td>
<td>
- <textarea cols="50" rows="3" name="text" wrap=virtual>${data.text}</textarea>
+ <textarea cols="50" rows="3" name="text" wrap=virtual>${encodeHTML(data.text)}</textarea>
</td>
</tr>