silverstripe/silverstripe-framework — pull request #3351 by halkyon (2014-07-31 23:17:44+00:00)
Title: BUG Ensure that Value and Title are escaped in field options

CheckboxSetField and OptionsetField currently output the raw $Title
and $Value contents, but these should be escaped.
DropdownField currently does this, it just seems it wasn't consistently
applied to the other templates.