[TYPO3-core] RFC #9060: Wrong alert text in Constant editor

[Martin Kutschker]

Dmitry Dulepov [typo3] schrieb:
> Hi!
> 
> Martin Kutschker wrote:
>> But now you'll get other character sets into the pop-up. This is not the
>> same as it has been.
>>
>> I think the value shouldn't be URL-encode but hsc'd as it's within an
>> attribute. AFAIR we have a special function in t3lib for that purpose.
> 
> Any more information?
> 
> I do not like that each patch is stuck here due to minor details...

It's t3lib_div::slashJS(). It will escape any '. This is all you need
for the parameter of a confirm(). And ouf course you'll need to hsc it
(as it is within an attribute).

Masi