zhhealthcare/openemr — comment on commit 07cdb1e0f48d33e0d25ce52363b3428106d51c75
File: interface/billing/billing_report.php line 1055
By bradymiller:

Remember to escape it:
Now have shortcuts for htmlspecialchars (they are much easier to use):
attr(oeFormatMoney($PatientPay)) -- same as htmlspecialchars with ENT_QUOTES
text(oeFormatMoney($PatientPay)) -- same as htmlspecialchars with ENT_NOQUOTES