Lucee 5.0 Strips CMFL/HTML from variables scope?

[Scott Conklin]

I just installed Lucee 5.2.1.9 on a new windows 2012 machine and code that worked on 4.5 and ADC 9+ 

is now exhibiting strange behavior:

Example:

<cfset email_from = '#attributes.from.name# <#attributes.from.email#>'  />

which is used in cfmail  as the from attribute like so

<cfmail type="html" from="#attributes.from#" ...

mail is failing saying invalid FROM 

A dump of the variable email_from shows 

that the <*> parts removed (i think.. or cfdump is rendering the <> instead of displaying it) 

using encodeForHTML solves the issue for dumping it but does NOT help for  cfmail.

mail gets dropped with invalid FROM still.

same for this contrived example:

<cfset testvar = "<cfif x eq 1>true<cfelse>false</cfif>" />

cfdump shows the results as 

truefalse

this does not happen on 4.5

Has something changed in this regard?