Steps to reproduce this issue:
1. Give site name with special char like "&am...

Steps to reproduce this issue:
1. Give site name with special char like "&".
2. visit user/login page
3. hover on the user name text field, notice the tool tip. the "&" will be show as the html entity code.

this is one instance where I noticed but it can happen somewhere else too.