--- realname_content_profile.inc	Thu Oct 29 19:29:59 2009
+++ realname_content_profile.inc	Thu Oct 29 19:35:45 2009
@@ -42,7 +42,7 @@
     }
   }
   
-  $account->title = $profile->title;
+  $account->title = check_plain($profile->title);
 }
 
 function realname_content_profile_get_types() {