diff --git a/changelog.html b/changelog.html
index 3827f2d5bb1eea6829eaa5b96344a59a0bb6346c..e52f59d60c3d584a95f34378ee3a7885acddb670 100644
--- a/changelog.html
+++ b/changelog.html
@@ -61,7 +61,7 @@ Upcoming changes</a>
 
 <!-- these changes are controlled by the release process. DO NOT MODIFY -->
 <div id="rc" style="display:none;"><!--=BEGIN=-->
-<h3><a name=v1.408>What's new in 1.408</a> <!--=DATE=--></h3>
+<h3><a name=v1.409>What's new in 1.409</a> <!--=DATE=--></h3>
 <ul class=image>
   <li class=bug>
     Some french strings are incorrect after renaming to Jenkins
@@ -92,6 +92,13 @@ Upcoming changes</a>
     Added "about Jenkins" screen that shows the 3rd party license acknowledgement.
 </ul>
 </div><!--=END=-->
+<h3><a name=v1.408>What's new in 1.408</a> (2011/04/18)</h3>
+<ul class=image>
+  <li class='major bug'>
+    Fixed a regression that resulted in too much escaping
+    (<a href="http://issues.jenkins-ci.org/browse/JENKINS-9426">issue 9426</a>)
+</ul>
+</div><!--=END=-->
 <h3><a name=v1.407>What's new in 1.407</a> (2011/04/15)</h3>
 <ul class=image>
   <li class='major bug'>
diff --git a/core/pom.xml b/core/pom.xml
index 88df0a536ee616f8d890926cbf1d0bf35c26f863..714a9df8a3bf0de9998a1772cc0da358d2ba0730 100644
--- a/core/pom.xml
+++ b/core/pom.xml
@@ -601,11 +601,6 @@ THE SOFTWARE.
         </exclusion>
       </exclusions>
     </dependency>
-    <dependency>
-      <groupId>org.jvnet.hudson</groupId>
-      <artifactId>commons-jelly</artifactId>
-      <version>1.1-hudson-20100305</version>
-    </dependency>
     <dependency>
       <groupId>org.jvnet.hudson</groupId>
       <artifactId>commons-jexl</artifactId>
diff --git a/core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly b/core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly
index d69c665acae975b0507315161b14236aca7df7d8..9469527b3d27a85046e9a23db11bedfe5d9cdaac 100644
--- a/core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly
+++ b/core/src/main/resources/hudson/model/Cause/UpstreamCause/description.jelly
@@ -24,5 +24,5 @@ THE SOFTWARE.
 <?jelly escape-by-default='true'?>
 <j:jelly xmlns:j="jelly:core" xmlns:st="jelly:stapler" xmlns:d="jelly:define" xmlns:l="/lib/layout" xmlns:t="/lib/hudson" xmlns:f="/lib/form">
     <!-- upstreamUrl added in 1.284, so handle missing value -->
-    <span>${it.upstreamUrl!=null ? "%started_by_project(it.upstreamProject,it.upstreamBuild.toString(),it.upstreamUrl,rootURL)" : it.shortDescription}</span>
+    <span><j:out value='${it.upstreamUrl!=null ? "%started_by_project(it.upstreamProject,it.upstreamBuild.toString(),it.upstreamUrl,rootURL)" : it.shortDescription}' /></span>
 </j:jelly>