Date dropdown has displayed a broken input for a long time. In my testing on J1.5.20+ onwards (now 1.5.25), CB 1.6+ (now 1.7.1) with PHP 5.3.4 on Linux VPS.

comprofiler.class.php line 3096 reads:

[code type=php]$js				=	'$("#' . $oIdName . '").parent().each( function() { $(this).html( $(this).html().replace(/^(?:([^<]*<input [^>]*)(type="?text"?)([^>]*)>)|(?:([^<]*<input [^>]*)([^>]*)>)/i,\'$1$4 type="hidden" $3$5>\') ); })'[/code]


The fix is to escape the callback values.

[code type=php]$js				=	'$("#' . $oIdName . '").parent().each( function() { $(this).html( $(this).html().replace(/^(?:([^<]*<input [^>]*)(type="?text"?)([^>]*)>)|(?:([^<]*<input [^>]*)([^>]*)>)/i,\'\$1\$4 type="hidden" \$3\$5>\') ); })'[/code]