Index: t3lib/class.t3lib_browsetree.php
===================================================================
--- t3lib/class.t3lib_browsetree.php	(revision 8444)
+++ t3lib/class.t3lib_browsetree.php	(working copy)
@@ -162,7 +162,7 @@
 			$rows = $GLOBALS['TYPO3_DB']->exec_SELECTgetRows('domainName,sorting', 'sys_domain',
 						'pid=' . $GLOBALS['TYPO3_DB']->quoteStr($row['uid'], 'sys_domain'), '', 'sorting', 1);
 			if (is_array($rows) && count($rows) > 0) {
-				$title = sprintf('%s [%s]', $title, $rows[0]['domainName']);
+				$title = sprintf('%s [%s]', $title, htmlspecialchars($rows[0]['domainName']));
 			}
 		}
 		return $title;
Index: typo3/class.browse_links.php
===================================================================
--- typo3/class.browse_links.php	(revision 8444)
+++ typo3/class.browse_links.php	(working copy)
@@ -423,8 +423,6 @@
 	 * @return	string		Wrapping title string.
 	 */
 	function wrapTitle($title,$v,$ext_pArrPages)	{
-		$title = htmlspecialchars($title);
-
 		if ($ext_pArrPages)	{
 			$ficon=t3lib_iconWorks::getIcon('pages',$v);
 			$onClick = "return insertElement('pages', '".$v['uid']."', 'db', ".t3lib_div::quoteJSvalue($v['title']).", '', '', '".$ficon."','',1);";
@@ -472,8 +470,6 @@
 	 * @return	string		Wrapping title string.
 	 */
 	function wrapTitle($title,$v)	{
-		$title = htmlspecialchars($title);
-
 		if ($this->ext_isLinkable($v))	{
 			$aOnClick = 'return jumpToUrl(\''.$this->thisScript.'?act='.$GLOBALS['SOBE']->browser->act.'&mode='.$GLOBALS['SOBE']->browser->mode.'&expandFolder='.rawurlencode($v['path']).'\');';
 			return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';
@@ -557,7 +553,7 @@
 				// Put table row with folder together:
 			$out.='
 				<tr class="'.$bgColorClass.'">
-					<td nowrap="nowrap">'.$v['HTML'].$this->wrapTitle(t3lib_div::fixed_lgd_cs($v['row']['title'],$titleLen),$v['row']).'</td>
+					<td nowrap="nowrap">'.$v['HTML'].$this->wrapTitle(htmlspecialchars(t3lib_div::fixed_lgd_cs($v['row']['title']),$titleLen),$v['row']).'</td>
 					'.$arrCol.'
 					<td>'.$cEbullet.'</td>
 				</tr>';
@@ -626,8 +622,6 @@
 	 * @return	string		Wrapping title string.
 	 */
 	function wrapTitle($title,$v)	{
-		$title = htmlspecialchars($title);
-
 		if ($this->ext_isLinkable($v))	{
 			$aOnClick = 'return jumpToUrl(\''.$this->thisScript.'?act='.$GLOBALS['SOBE']->browser->act.'&mode='.$GLOBALS['SOBE']->browser->mode.'&expandFolder='.rawurlencode($v['path']).'\');';
 			return '<a href="#" onclick="'.htmlspecialchars($aOnClick).'">'.$title.'</a>';