bradymiller/openemr — comment on commit f9dc3687ea95ad70b4feb4eabaf0c7826d9a11ff
File: interface/main/calendar/dated_reminders_add.php line 150
By bradymiller:

Needs to be escaped. Can not use htmlspecialchars to escape javascript literals, and need to use addslashes:
```echo ' alert("'.addslashes(xl('Message Sent').'"));';```

For better explanation of the security model and using these functions see here (see exception in step 4):
http://www.open-emr.org/wiki/index.php/Codebase_Security#Plan