From 50f9e17be4e1ee557cd80b23fd7b4ce03b5f6542 Mon Sep 17 00:00:00 2001
From: Roland Gruber <post@rolandgruber.de>
Date: Sat, 23 Nov 2013 14:39:41 +0000
Subject: [PATCH] fixed help escaping

---
 lam/lib/modules.inc | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/lam/lib/modules.inc b/lam/lib/modules.inc
index 1d6f63d3..9a36e7d9 100644
--- a/lam/lib/modules.inc
+++ b/lam/lib/modules.inc
@@ -654,10 +654,8 @@ function printHelpLink($entry, $number, $module='', $scope='') {
 		$message .= '<br><br><hr class="dotted">' . _('Technical name') . ': <i>' . $entry['attr'] . '</i>';
 	}
 	// replace special characters
-	$message = preg_replace('/[\\\\]{2}/', '&#92;&#92;&#92;&#92;', $message);
-	$title = preg_replace('/[\\\\]{2}/', '&#92;&#92;&#92;&#92;', $title);
-	$message = str_replace(array('\\', '"', "\n"), array('\\\\', '&quot;', ''), $message);
-	$title = str_replace(array('\\', "'", '"', "\n"), array('\\\\', "\\'", '&quot;', ''), $title);
+	$message = htmlspecialchars($message);
+	$title = htmlspecialchars($title);
 	echo "<a class=\"margin2\" href=\"" . $helpPath . "help.php?module=$module&amp;HelpNumber=". $number . "&amp;scope=" . $scope . "\" ";
 		echo "target=\"help\">";
 		echo "<img helptitle=\"" . $title . "\" helpdata=\"" . $message . "\" class=\"align-middle\" width=16 height=16 src=\"../$helpPath/graphics/help.png\" alt=\"" . _('Help') . "\">";