Index: /branches/4.1/src/wp-admin/includes/class-wp-comments-list-table.php
===================================================================
--- /branches/4.1/src/wp-admin/includes/class-wp-comments-list-table.php	(revision 32175)
+++ /branches/4.1/src/wp-admin/includes/class-wp-comments-list-table.php	(revision 32176)
@@ -555,7 +555,7 @@
 		if ( current_user_can( 'edit_post', $post->ID ) ) {
 			$post_link = "<a href='" . get_edit_post_link( $post->ID ) . "'>";
-			$post_link .= get_the_title( $post->ID ) . '</a>';
+			$post_link .= esc_html( get_the_title( $post->ID ) ) . '</a>';
 		} else {
-			$post_link = get_the_title( $post->ID );
+			$post_link = esc_html( get_the_title( $post->ID ) );
 		}
 
Index: /branches/4.1/src/wp-admin/includes/dashboard.php
===================================================================
--- /branches/4.1/src/wp-admin/includes/dashboard.php	(revision 32175)
+++ /branches/4.1/src/wp-admin/includes/dashboard.php	(revision 32176)
@@ -519,5 +519,5 @@
 	$GLOBALS['comment'] =& $comment;
 
-	$comment_post_title = strip_tags(get_the_title( $comment->comment_post_ID ));
+	$comment_post_title = _draft_or_post_title( $comment->comment_post_ID );
 
 	if ( current_user_can( 'edit_post', $comment->comment_post_ID ) ) {
Index: /branches/4.1/src/wp-admin/includes/template.php
===================================================================
--- /branches/4.1/src/wp-admin/includes/template.php	(revision 32175)
+++ /branches/4.1/src/wp-admin/includes/template.php	(revision 32176)
@@ -1506,5 +1506,5 @@
 	if ( empty( $title ) )
 		$title = __( '(no title)' );
-	return $title;
+	return esc_html( $title );
 }
 
Index: /branches/4.1/src/wp-admin/js/nav-menu.js
===================================================================
--- /branches/4.1/src/wp-admin/js/nav-menu.js	(revision 32175)
+++ /branches/4.1/src/wp-admin/js/nav-menu.js	(revision 32176)
@@ -454,5 +454,5 @@
 					thisLink = menuItem.find( '.menus-move-left' ),
 					thisLinkText = menus.outFrom.replace( '%s', prevItemNameLeft );
-					thisLink.prop( 'title', menus.moveOutFrom.replace( '%s', prevItemNameLeft ) ).html( thisLinkText ).css( 'display', 'inline' );
+					thisLink.prop( 'title', menus.moveOutFrom.replace( '%s', prevItemNameLeft ) ).text( thisLinkText ).css( 'display', 'inline' );
 				}
 
@@ -461,5 +461,5 @@
 						thisLink = menuItem.find( '.menus-move-right' ),
 						thisLinkText = menus.under.replace( '%s', prevItemNameRight );
-						thisLink.prop( 'title', menus.moveUnder.replace( '%s', prevItemNameRight ) ).html( thisLinkText ).css( 'display', 'inline' );
+						thisLink.prop( 'title', menus.moveUnder.replace( '%s', prevItemNameRight ) ).text( thisLinkText ).css( 'display', 'inline' );
 					}
 				}
@@ -483,5 +483,5 @@
 				}
 
-				$this.prop('title', title).html( title );
+				$this.prop('title', title).text( title );
 			});
 		},