Index: typo3/template.php
===================================================================
--- typo3/template.php	(revision 5129)
+++ typo3/template.php	(working copy)
@@ -1373,7 +1373,7 @@
 			foreach($menuItems as $value => $label) {
 				$menuDef[$value]['isActive'] = !strcmp($currentValue,$value);
 				$menuDef[$value]['label'] = t3lib_div::deHSCentities(htmlspecialchars($label));
-				$menuDef[$value]['url'] = htmlspecialchars($script.'?'.$mainParams.$addparams.'&'.$elementName.'='.$value);
+				$menuDef[$value]['url'] = $script.'?'.$mainParams.$addparams.'&'.$elementName.'='.$value;
 			}
 			$content = $this->getTabMenuRaw($menuDef);