ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.