diff --git a/templates/kt3/browse.smarty b/templates/kt3/browse.smarty
index 7819bf9..b420c09 100644
--- a/templates/kt3/browse.smarty
+++ b/templates/kt3/browse.smarty
@@ -44,7 +44,7 @@
   <input type="hidden" name="sListCode" value="{$code}" />
   <input type="hidden" name="action" value="bulkaction" />
   <input type="hidden" name="fReturnAction" value="{$returnaction}" />
-  <input type="hidden" name="fReturnData" value="{$returndata}" />
+  <input type="hidden" name="fReturnData" value="{$returndata|sanitize}" />
 
   {foreach from=$bulkactions item=bulkaction}
       <input type="submit" name="submit[{$bulkaction->getName()}]" value="{$bulkaction->getDisplayName()}" />
diff --git a/templates/ktcore/assist/assist_notification.smarty b/templates/ktcore/assist/assist_notification.smarty
index 4fe200e..4f3057c 100644
--- a/templates/ktcore/assist/assist_notification.smarty
+++ b/templates/ktcore/assist/assist_notification.smarty
@@ -1,6 +1,6 @@
-<dt class="actionitem">{$subject}</dt>
+<dt class="actionitem">{$subject|sanitize}</dt>
 <dd class="actionmessage">
-    {i18n arg_name=$document_name arg_state=$state_name arg_user=$actor->getName()}A
+    {i18n arg_name=$document_name|sanitize arg_state=$state_name arg_user=$actor->getName()}A
     user, <b>#user#</b>, has requested help on the document <b>#name#</b>, and you are
     the owner or an admin of this document.{/i18n}
     <div class="actionoptions">
diff --git a/templates/ktcore/assist/assist_notification_details.smarty b/templates/ktcore/assist/assist_notification_details.smarty
index cd6bab8..c3bb4cf 100644
--- a/templates/ktcore/assist/assist_notification_details.smarty
+++ b/templates/ktcore/assist/assist_notification_details.smarty
@@ -1,5 +1,5 @@
 <p class="descriptiveText">
-    {i18n arg_name=$document_name arg_state=$state_name arg_user=$actor->getName()}A
+    {i18n arg_name=$document_name|sanitize arg_state=$state_name arg_user=$actor->getName()}A
     user, <b>#user#</b>, has requested help on the document <b>#name#</b>, and you are
     the owner or an admin of this document.{/i18n}
 </p>