Confirmed locally: The login.php file contains double-encoded language fields with visible HTML characters. Reported by Brent on the mailing list.