[Bug 450484] [RC 1.2] Some parts of installation do not escape HTML in proposals, code is then executed