Yeehaaw! It started off as a problem we discovered at Nunet with the Drupal XML-RPC server (having html tags inserted into the XML-RPC error messages). I wrote up the patch, and today it got into Drupal 6 and 7!

[update] and it also found its way into Drupal 5.