You need to really check that html_output.php on the admin as it is different than the one on the Catalog ...

Check the security updates again and compare the file in the security update and the one on the server in the:
/admin/includes/functions/html_output.php