Text fields with a value attribute were not encoded as discovered by penetration tests.
Authored by: keess 2013-01-24
Parent: [r2498]
Child: [r2500]
