From cfea0386f4105df7ebbb20e0bdc51c09b7c7522e Mon Sep 17 00:00:00 2001
From: Dannon Baker <dannon.baker@gmail.com>
Date: Wed, 13 May 2015 15:47:56 -0400
Subject: [PATCH] Missed one.

---
 lib/galaxy/jobs/actions/post.py | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/galaxy/jobs/actions/post.py b/lib/galaxy/jobs/actions/post.py
index 4985d91dd49..da867d47aa6 100644
--- a/lib/galaxy/jobs/actions/post.py
+++ b/lib/galaxy/jobs/actions/post.py
@@ -265,7 +265,7 @@ class HideDatasetAction(DefaultJobAction):
 
     @classmethod
     def get_short_str(cls, pja):
-        return "Hide output '%s'." % pja.output_name
+        return "Hide output '%s'." % escape(pja.output_name)
 
 
 class DeleteDatasetAction(DefaultJobAction):
@@ -341,7 +341,7 @@ class ColumnSetAction(DefaultJobAction):
 
     @classmethod
     def get_short_str(cls, pja):
-        return "Set the following metadata values:<br/>" + "<br/>".join(['%s : %s' % (k, v) for k, v in pja.action_arguments.iteritems()])
+        return "Set the following metadata values:<br/>" + "<br/>".join(['%s : %s' % (escape(k), escape(v)) for k, v in pja.action_arguments.iteritems()])
 
 
 class SetMetadataAction(DefaultJobAction):