Fixed #4991 -- Emphasized XSS ramifications of help_text not being escaped.