Re-add check_plain() in appropriate places after removing it from ip_address().

includes/bootstrap.inc

@@ -891,7 +891,7 @@ function _drupal_bootstrap($phase) {
       // Deny access to hosts which were banned - t() is not yet available.
       if (drupal_is_denied('host', ip_address())) {
         header('HTTP/1.1 403 Forbidden');
-        print 'Sorry, '. ip_address() .' has been banned.';
+        print 'Sorry, '. check_plain(ip_address()) .' has been banned.';
         exit();
       }
       break;

modules/dblog/dblog.admin.inc

@@ -154,7 +154,7 @@ function dblog_event($id) {
       ),
       array(
         array('data' => t('Hostname'), 'header' => TRUE),
-        $dblog->hostname,
+        check_plain($dblog->hostname),
       ),
       array(
         array('data' => t('Operations'), 'header' => TRUE),