Covering our XSS bases

git-svn-id: https://develop.svn.wordpress.org/trunk@9233 602fd350-edb4-49c9-b593-d223f7449a82

wp-admin/export.php

@@ -22,7 +22,7 @@ require_once ('admin-header.php');
 ?>
 
 <div class="wrap">
-<h2><?php echo $title ?></h2> 
+<h2><?php echo wp_specialchars( $title ); ?></h2> 
 
 <p><?php _e('When you click the button below WordPress will create an XML file for you to save to your computer.'); ?></p>
 <p><?php _e('This format, which we call WordPress eXtended RSS or WXR, will contain your posts, pages, comments, custom fields, categories, and tags.'); ?></p>