diff --git a/protein/api-src/org/labkey/api/protein/CoverageProtein.java b/protein/api-src/org/labkey/api/protein/CoverageProtein.java
index 127d32db8..3c5609ab5 100644
--- a/protein/api-src/org/labkey/api/protein/CoverageProtein.java
+++ b/protein/api-src/org/labkey/api/protein/CoverageProtein.java
@@ -593,7 +593,7 @@ else if (counts.confidenceRank != 0)
                         String varmod = String.format("%d(%s)", counts.getCountModifications().get(modStr), modStr );
                         linkText += " / " + varmod;
                         if (!_forCoverageMapExport)
-                            details.append(varmod);
+                            details.append(PageFlowUtil.filter(varmod));
                     }
                     label = linkText;
                     if (!_forCoverageMapExport)
@@ -658,7 +658,7 @@ else if (counts.confidenceRank != 0)
 
                         }
                         label = PageFlowUtil.popupHelp(HtmlString.unsafe(details.toString()), "Peptide Details")
-                                .link(HtmlString.unsafe("<div style=\"color:" + range.pepcounts.foregroundColor +"\">" + linkText + "</div>"))
+                                .link(HtmlString.unsafe("<div style=\"color:" + PageFlowUtil.filter(range.pepcounts.foregroundColor) +"\">" + PageFlowUtil.filter(linkText) + "</div>"))
                                 .script(onClickScript)
                                 .width(250)
                                 .toString();
@@ -694,7 +694,7 @@ else if (counts.confidenceRank != 0)
             {
                 if (baseOutput.equalsIgnoreCase(PEPTIDE_START_TD))
                 {
-                    td = String.format(baseOutput, cssClass, "background-color:" + range.pepcounts.peptideColor, colsCurrentRow, label);
+                    td = String.format(baseOutput, cssClass, "background-color:" + PageFlowUtil.filter(range.pepcounts.peptideColor), colsCurrentRow, label);
                 }
                 else
                 {