Fixed data-dialog-url does not escape the '&' char

[refael]

data-dialog-url, which is in the editor template, does not escape the '&' char

data-dialog-url="index.php?editor/dialog&style=1"

(Found that during html validation tests)

 

[Mike]

I've fixed this. Based on a code search, this is the only unescaped entity I could find.