tajemo/openemr — comment on commit c94930223aba7430a2f50d0122a257c79ba2b7a1
File: interface/main/calendar/dated_reminders_add.php line 135
By bradymiller:

This needs to be translated and html escaped. Since it is a literal within a javascript function need to use addslashes() function rather than the htmlspecialchars based functions:
```echo " alert(".addslashes(xl('Message Sent')).");\n";```

http://www.open-emr.org/wiki/index.php/Codebase_Security#Plan:
see step 4 exception for details