diff --git a/src/main/java/org/olat/course/CourseXStreamAliases.java b/src/main/java/org/olat/course/CourseXStreamAliases.java
index f5d712bc4dd6ae165ca05028b5d02fdfca04583a..e3e1695a80096e098e6a593a97e840041a9ddfd6 100644
--- a/src/main/java/org/olat/course/CourseXStreamAliases.java
+++ b/src/main/java/org/olat/course/CourseXStreamAliases.java
@@ -24,6 +24,7 @@ import org.olat.core.gui.control.generic.iframe.DeliveryOptions;
 import org.olat.core.util.xml.XStreamHelper;
 import org.olat.course.condition.Condition;
 import org.olat.course.condition.ExtendedCondition;
+import org.olat.course.condition.operators.AttributeEndswithOperator;
 import org.olat.course.condition.operators.AttributeStartswithOperator;
 import org.olat.course.condition.operators.EqualsOperator;
 import org.olat.course.condition.operators.GreaterThanEqualsOperator;
@@ -140,6 +141,7 @@ public class CourseXStreamAliases {
 		readXstream.alias("HasAttributeOperator", HasAttributeOperator.class);
 		readXstream.alias("HasNotAttributeOperator", HasNotAttributeOperator.class);
 		readXstream.alias("AttributeStartswithOperator", AttributeStartswithOperator.class);
+		readXstream.alias("AttributeEndswithOperator", AttributeEndswithOperator.class);
 		
 		//deleted attributes
 		readXstream.omitField(DeliveryOptions.class, "noJavascript");
diff --git a/src/main/java/org/olat/course/area/CourseAreasController.java b/src/main/java/org/olat/course/area/CourseAreasController.java
index e850c015950eb92c2077dce6e8738394548f5d36..05a6c115a5008168e49b857776777aad7b821852 100644
--- a/src/main/java/org/olat/course/area/CourseAreasController.java
+++ b/src/main/java/org/olat/course/area/CourseAreasController.java
@@ -24,6 +24,7 @@ import java.util.List;
 
 import org.olat.core.gui.UserRequest;
 import org.olat.core.gui.components.Component;
+import org.olat.core.gui.components.EscapeMode;
 import org.olat.core.gui.components.link.Link;
 import org.olat.core.gui.components.link.LinkFactory;
 import org.olat.core.gui.components.panel.StackedPanel;
@@ -86,7 +87,9 @@ public class CourseAreasController extends MainLayoutBasicController {
 		listenTo(tableCtrl);
 		
 		tableCtrl.addColumnDescriptor(new DefaultColumnDescriptor("table.header.name", 0, null, getLocale()));
-		tableCtrl.addColumnDescriptor(new DefaultColumnDescriptor("table.header.description", 1, null, getLocale()));
+		DefaultColumnDescriptor descriptionColDesc = new DefaultColumnDescriptor("table.header.description", 1, null, getLocale());
+		descriptionColDesc.setEscapeHtml(EscapeMode.antisamy);
+		tableCtrl.addColumnDescriptor(descriptionColDesc);
 		tableCtrl.addColumnDescriptor(new StaticColumnDescriptor(TABLE_ACTION_EDIT, "action", translate("edit")));
 		tableCtrl.addColumnDescriptor(new StaticColumnDescriptor(TABLE_ACTION_DELETE, "action", translate("delete")));