Index: openacs-4/packages/acs-tcl/tcl/admin-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/admin-procs.tcl,v
diff -u -r1.22 -r1.23
--- openacs-4/packages/acs-tcl/tcl/admin-procs.tcl	27 Oct 2014 16:40:05 -0000	1.22
+++ openacs-4/packages/acs-tcl/tcl/admin-procs.tcl	15 Jun 2015 11:20:16 -0000	1.23
@@ -229,7 +229,7 @@
         foreach elm $user_finite_states {
             set url [lindex $elm 0]
             set label [lindex $elm 1]
-            lappend user_finite_state_links [subst {<a href="$url">$label</a>}]
+            lappend user_finite_state_links [subst {<a href="[ns_quotehtml $url]">$label</a>}]
         }
         
         return $user_finite_state_links
Index: openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl,v
diff -u -r1.116 -r1.117
--- openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl	22 May 2015 08:54:42 -0000	1.116
+++ openacs-4/packages/acs-tcl/tcl/request-processor-procs.tcl	15 Jun 2015 11:20:16 -0000	1.117
@@ -427,14 +427,14 @@
     # Create the table header.
     set list "
 <table>
-<tr align=left><th>File</th><th>Size</th><th>Date</th></tr>
-<tr align=left><td colspan=3><a href=../>..</a></td></tr>
+<tr align='left'><th>File</th><th>Size</th><th>Date</th></tr>
+<tr align='left'><td colspan='3'><a href='../'>..</a></td></tr>
 "
 
     # Loop through the files, adding a row to the table for each.
     foreach file [lsort [glob -nocomplain $dir/*]] {
         set tail [file tail $file]
-        set link "<a href=$tail>$tail</a>"
+        set link "<a href=\"$tail\">[ns_quotethml $tail]</a>"
 
         # Build the stat array containing information about the file.
         file stat $file stat
@@ -443,7 +443,7 @@
         set time [clock format $mtime -format "%d-%h-%Y %H:%M"]
 
         # Write out the row.
-        append list "<tr align=left><td>$link</td><td>$size</td><td>$time</td></tr>\n"
+        append list "<tr align='left'><td>$link</td><td>$size</td><td>$time</td></tr>\n"
     }
     append list "</table>"
     return $list