Index: openacs-4/packages/categories/tcl/category-list-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/categories/tcl/category-list-procs.tcl,v
diff -u -r1.7 -r1.8
--- openacs-4/packages/categories/tcl/category-list-procs.tcl	27 Oct 2014 16:41:11 -0000	1.7
+++ openacs-4/packages/categories/tcl/category-list-procs.tcl	22 Jun 2015 21:20:28 -0000	1.8
@@ -157,10 +157,10 @@
 	    set remove_link [uplevel $uplevel concat $remove_link_eval]
 	}
 	if {$category_link ne ""} {
-	    set category_name "<a href=\"$category_link\"$cat_link_html>$category_name</a>"
+	    set category_name "<a href=\"[ns_quotehtml $category_link]\"$cat_link_html>$category_name</a>"
 	}
         if {$remove_link ne ""} { 
-            append category_name "&nbsp;<a href=\"$remove_link\" title=\"Remove this category\">$remove_link_text</a>"
+            append category_name "&nbsp;<a href=\"[ns_quotehtml $remove_link]\" title=\"Remove this category\">$remove_link_text</a>"
         }
 
 	if {$tree_id != $old_tree_id} {
@@ -172,7 +172,7 @@
 		set tree_link [uplevel $uplevel concat $tree_link_eval]
 	    }
 	    if {$tree_link ne ""} {
-		set tree_name "<a href=\"$tree_link\"$cat_tree_link_html>$tree_name</a>"
+		set tree_name "<a href=\"[ns_quotehtml $tree_link]\"$cat_tree_link_html>$tree_name</a>"
 	    }
 	    append result "$tree_name$tree_colon$category_name"
 	} else {
@@ -323,7 +323,7 @@
 			set category_link [uplevel 1 concat $category_link_eval]
 		    }
 		    if {$category_link ne ""} {
-			set category_name "<a href=\"$category_link\"$cat_link_html>$category_name</a>"
+			set category_name "<a href=\"[ns_quotehtml $category_link]\"$cat_link_html>$category_name</a>"
 		    }
 		    if {$pretty_category_list ne ""} {
 			append pretty_category_list "$category_delimiter$category_name"