Index: includes/common.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/common.inc,v
retrieving revision 1.1107
diff -u -r1.1107 common.inc
--- includes/common.inc	15 Feb 2010 22:08:49 -0000	1.1107
+++ includes/common.inc	16 Feb 2010 07:54:07 -0000
@@ -1438,6 +1438,9 @@
 
 /**
  * Prepare a URL for use in an HTML attribute. Strips harmful protocols.
+ * 
+ * @return
+ *   Cleaned up and HTML-escaped version of $uri.
  */
 function check_url($uri) {
   return filter_xss_bad_protocol($uri, FALSE);
Index: includes/theme.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/theme.inc,v
retrieving revision 1.574
diff -u -r1.574 theme.inc
--- includes/theme.inc	15 Feb 2010 15:52:27 -0000	1.574
+++ includes/theme.inc	16 Feb 2010 07:54:09 -0000
@@ -1926,7 +1926,7 @@
  * Returns code that emits the 'more help'-link.
  */
 function theme_more_help_link($variables) {
-  return '<div class="more-help-link">' . t('<a href="@link">More help</a>', array('@link' => check_url($variables['url']))) . '</div>';
+  return '<div class="more-help-link">' . t('<a href="!link">More help</a>', array('!link' => check_url($variables['url']))) . '</div>';
 }
 
 /**
@@ -1995,7 +1995,7 @@
  *   - title: A descriptive verb for the link, like 'Read more'
  */
 function theme_more_link($variables) {
-  return '<div class="more-link">' . t('<a href="@link" title="@title">more</a>', array('@link' => check_url($variables['url']), '@title' => $variables['title'])) . '</div>';
+  return '<div class="more-link">' . t('<a href="!link" title="@title">more</a>', array('!link' => check_url($variables['url']), '@title' => $variables['title'])) . '</div>';
 }
 
 /**