diff --git a/experiment/src/org/labkey/experiment/api/ExpDataImpl.java b/experiment/src/org/labkey/experiment/api/ExpDataImpl.java
index 2b0df299331..a0e259f5dbc 100644
--- a/experiment/src/org/labkey/experiment/api/ExpDataImpl.java
+++ b/experiment/src/org/labkey/experiment/api/ExpDataImpl.java
@@ -70,6 +70,7 @@
 import org.labkey.api.util.NetworkDrive;
 import org.labkey.api.util.Pair;
 import org.labkey.api.util.Path;
+import org.labkey.api.util.PageFlowUtil;
 import org.labkey.api.util.StringUtilsLabKey;
 import org.labkey.api.util.URLHelper;
 import org.labkey.api.util.InputBuilder;
@@ -939,7 +940,8 @@ private void appendParam(StringBuilder sb, @Nullable String dataclass, @Nullable
             }
             else
             {
-                sb.append(label);
+                // GitHub Kanban #1946: encode the label (a DataClass name); the if-branch above already encodes via LinkBuilder.simpleLink.
+                sb.append(PageFlowUtil.filter(label));
             }
 
             sb.append("</span> ");
diff --git a/issues/src/org/labkey/issue/actions/ChangeSummary.java b/issues/src/org/labkey/issue/actions/ChangeSummary.java
index 545c8adab3f..59e8c1b6f62 100644
--- a/issues/src/org/labkey/issue/actions/ChangeSummary.java
+++ b/issues/src/org/labkey/issue/actions/ChangeSummary.java
@@ -168,7 +168,8 @@ static public ChangeSummary createChangeSummary(ViewContext context, IssueListDe
                     summary += " of " + duplicateOf.getIssueId();
             }
 
-            sbHTMLChanges.append("<b>").append(summary);
+            // GitHub Kanban #1946: encode summary, which includes the issue resolution text
+            sbHTMLChanges.append("<b>").append(PageFlowUtil.filter(summary));
             sbHTMLChanges.append("</b><br>\n");
         }