Index: typo3/sysext/sys_action/toolbarmenu/class.tx_sysaction_toolbarmenu.php
===================================================================
--- typo3/sysext/sys_action/toolbarmenu/class.tx_sysaction_toolbarmenu.php	(Revision 8748)
+++ typo3/sysext/sys_action/toolbarmenu/class.tx_sysaction_toolbarmenu.php	(Arbeitskopie)
@@ -85,7 +85,7 @@
 
 			$actionMenu[] = '<ul class="toolbar-item-menu" style="display: none;">';
 			foreach ($actionEntries as $linkConf) {
-				$actionMenu[] = '<li><a href="' . $linkConf[1] .
+				$actionMenu[] = '<li><a href="' . htmlspecialchars($linkConf[1]) .
 					'" target="content">' . $linkConf[2] .
 					htmlspecialchars($linkConf[0]) . '</a></li>';
 			}