bradymiller/openemr — comment on commit f9dc3687ea95ad70b4feb4eabaf0c7826d9a11ff
File: interface/main/calendar/dated_reminders_add.php line 309
By bradymiller:

surround $pid by attr() function (I know this is anal, but this is best way to heavily protect against cross scritping attacks.