Ticket #17910: 17910.patch

wp-admin/js/user-profile.dev.js

@@ -50 +50 @@
 
                         $('option', select).remove();
                         $.each(inputs, function( id, value ) {
-                                var selected;
+                                var option, val = value.replace(/<\/?[a-z][^>]?>/gi, '');
 
-                                if ( inputs[id].length && $.inArray( value, dub ) == -1 ) {
-                                        dub.push(value);
-                                        selected = id == current ? 'selected="selected"' : '';
-                                        select.append('<option id="' + id + '" ' + selected + '">' + value + '</option>');
+                                if ( inputs[id].length && $.inArray( val, dub ) == -1 ) {
+                                        dub.push(val);
+                                        option = $('<option />');
+                                        option.attr('id', id);
+
+                                        if ( id == current )
+                                                option.prop('selected', true);
+
+                                        select.append( option.text(val) );
                                 }
                         });
                 });