yiisoft/yii — pull request #2652 by tenitski (2013-07-18 04:25:39+00:00)
Title: Form error messages were not encoded when rendered

Error messages should be encoded as they may contain html.
CHtml::error() and CHtml::errorSummary() were outputting them as is