Index: includes/form.inc
===================================================================
RCS file: /cvs/drupal/drupal/includes/form.inc,v
retrieving revision 1.506
diff -u -p -r1.506 form.inc
--- includes/form.inc	21 Oct 2010 20:46:58 -0000	1.506
+++ includes/form.inc	26 Oct 2010 01:17:45 -0000
@@ -2775,7 +2775,7 @@ function form_process_radios($element) {
         $parents_for_id = array_merge($element['#parents'], array($key));
         $element[$key] = array(
           '#type' => 'radio',
-          '#title' => $choice,
+          '#title' => filter_xss_admin($choice),
           '#return_value' => check_plain($key),
           '#default_value' => isset($element['#default_value']) ? $element['#default_value'] : NULL,
           '#attributes' => $element['#attributes'],
@@ -2871,7 +2871,7 @@ function form_process_checkboxes($elemen
         $element[$key] = array(
           '#type' => 'checkbox',
           '#processed' => TRUE,
-          '#title' => $choice,
+          '#title' => filter_xss_admin($choice),
           '#return_value' => $key,
           '#default_value' => isset($value[$key]) ? $key : NULL,
           '#attributes' => $element['#attributes'],