I took a stab at fixing this myself. It seems to work fine but -- since I'm not a PHP programmer or anything -- it may break something else.
----
In dataset-form.php, I changed two lines to use HTML encoding for single and double quote marks. (The issue here seems to be that a quote mark in the field gets treated like the end of the attribute in HTML.)
5. ... $name ...
5. ... str_replace("\"", """, str_replace("\'", "'", $name)) ...
and
26. [blank]
26. <?php $meta_data[$form_field->id] = str_replace("\"", """, str_replace("\'", "'", $meta_data[$form_field->id])); ?>
----
I changed quite a few lines in admin.php, wrapping attributes in the stripslashes function to remove the unwanted backslashes.
510. ... name ...
510. ... stripslashes($name) ...
and
525. $meta_value
525. stripslashes($meta_value)
and
584. [same as 525]
and
586. [same as 525]
----
(@koelle, I will email my modified files to you directly. I started from ProjectManager 2.1.)