Index: install.php
===================================================================
RCS file: /cvs/drupal/drupal/install.php,v
retrieving revision 1.113.2.12
diff -u -r1.113.2.12 install.php
--- install.php	9 May 2010 14:13:31 -0000	1.113.2.12
+++ install.php	11 Oct 2010 03:40:24 -0000
@@ -486,7 +486,7 @@
       '#value' => 'default',
       '#return_value' => $profile,
       '#title' => $name,
-      '#description' => isset($profiles[$profile]['description']) ? $profiles[$profile]['description'] : '',
+      '#description' => isset($profiles[$profile]['description']) ? filter_xss_admin($profiles[$profile]['description']) : '',
       '#parents' => array('profile'),
     );
   }