Ticket #27942: 27942.patch

src/wp-includes/formatting.php

@@ -3267 +3267 @@
 
                 case 'blogdescription':
                 case 'blogname':
-                        $value = wp_kses_post( $value );
+                        $value = htmlentities2($value);
                         $value = esc_html( $value );
                         break;