please test and fix the following

for example view in IE:

http://demo.dotcms.org/"><script>alert(097531);</script>/

We have a method in utilmethods to handle this. We can handle it at the top of the velocity servlet