Index: export/views_bonus_export.module
===================================================================
--- export/views_bonus_export.module	(revision 493)
+++ export/views_bonus_export.module	(working copy)
@@ -115,10 +115,10 @@
 
   foreach ($vars['themed_rows'] as $num => $row) {
     foreach ($row as $field => $content) {
-      $vars['themed_rows'][$num][$field] = str_replace(
-        array('&', '<', '>'),
-        array('&amp;', '&lt;', '&gt;'),
-        $content);
+      // Convert & < and > characters but not quotes. Special characters may have been converted 
+      // already to HTML entities by e.g. check_plain(), so we need the third argument to prevent
+      // double encoding.
+      $vars['themed_rows'][$num][$field] = htmlspecialchars($content, ENT_NOQUOTES, TRUE);
     }
   }
 }