Index: includes/install.core.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/install.core.inc,v
retrieving revision 1.38
diff -u -r1.38 install.core.inc
--- includes/install.core.inc	7 Oct 2010 03:26:41 -0000	1.38
+++ includes/install.core.inc	11 Oct 2010 12:41:51 -0000
@@ -1147,7 +1147,7 @@
       '#value' => 'standard',
       '#return_value' => $profile,
       '#title' => $name,
-      '#description' => isset($profiles[$profile]['description']) ? $profiles[$profile]['description'] : '',
+      '#description' => isset($profiles[$profile]['description']) ? filter_xss_admin($profiles[$profile]['description']) : '',
       '#parents' => array('profile'),
     );
   }