Release Notes don't escape HTML special characters in TextArea

When I generate HTML Release Notes, the TextArea at the bottom of the page includes unescaped characters such as & and <.

I know this is a duplicate of several issues that are marked as fixed in previous versions of JIRA. However, I am seeing this in the version 3.7.2 running at http://issues.apache.org.