- Unrolled patch #29103: always encode apostrophes.

includes/common.inc

@@ -649,7 +649,7 @@ function t($string, $args = 0) {
  * Encode special characters in a plain-text string for display as HTML.
  */
 function check_plain($text) {
-  return htmlspecialchars($text);
+  return htmlspecialchars($text, ENT_QUOTES);
 }
 
 /**