Undesireable HTML messages

Limit login used to send a nice clean text message when the specified number of lockouts was exceeded. Recently (last update?) it started stuffing html tags in the message and is including undesirable urls.

I assume there’s some way to turn this stuff off, but I can find it. Any suggestions?