Not sure if the hotpot module is converting ampersands correctly. $heading and $title are set up differently than in other modules: instead of outputting $course->title, a temporary $title variable is created and assigned that value. That made it difficult for me to decide whether it was already formatted elsewhere or not.
Also I didn't format_string() any of the variables included in $navigation rings, because I assume these strings get processed by print_navigation(), which includes format_string().
Fixed drilldown by category view for students
Fixed download as text/excel this just shows raw points and a total
Changed tabbed view to only show advanced setting tabs if use advanced is set to yes