Index: modules/user.module
===================================================================
RCS file: /cvs/drupal/drupal/modules/Attic/user.module,v
retrieving revision 1.454.2.22
diff -u -p -r1.454.2.22 user.module
--- modules/user.module	13 Mar 2006 21:29:18 -0000	1.454.2.22
+++ modules/user.module	2 Aug 2006 18:09:56 -0000
@@ -835,7 +835,7 @@ function user_login($edit = array(), $ms
 
   // Display login form:
   if ($msg) {
-    $output .= "<p>$msg</p>";
+    $output .= '<p>'. check_plain($msg) .'</p>';
   }
   if (count(user_auth_help_links()) > 0) {
     $output .= form_textfield(t('Username'), 'name', $edit['name'], 30, 64, t('Enter your %s username, or an ID from one of our affiliates: %a.', array('%s' => variable_get('site_name', 'local'), '%a' => implode(', ', user_auth_help_links()))));