bradymiller/openemr — comment on commit f9dc3687ea95ad70b4feb4eabaf0c7826d9a11ff
File: interface/main/calendar/dated_reminders.php line 286
By bradymiller:

Needs to be escaped. Can not use htmlspecialchars to escape javascript literals, and need to use addslashes:
```alert(""); ```

For better explanation of the security model and using these functions see here (see exception in step 4):
http://www.open-emr.org/wiki/index.php/Codebase_Security#Plan