there were 2 changes that I can see:

change 1

  properties = ProfileController.GetPropertyDefinitionsByPortal(portalId)

changed to

  properties = ProfileController.GetPropertyDefinitionsByPortal(portalId, True)

change 2

      dataProvider.UpdateProfileProperty(Null.NullInteger, user.UserID, profProperty.PropertyDefinitionId, profProperty.PropertyValue, profProperty.Visibility, Now())

changed to

                    Dim objSecurity As New PortalSecurity
                    Dim propertyValue As String = objSecurity.InputFilter(profProperty.PropertyValue, PortalSecurity.FilterFlag.NoScripting)

dataProvider.UpdateProfileProperty(Null.NullInteger, user.UserID, profProperty.PropertyDefinitionId, propertyValue, profProperty.Visibility, Now())