Escape backtrace listing to avoid possible XSS on this.

2010-08-23 17:05:53 +02:00
parent a24e418527
commit 133a77fac7
1 changed files with 1 additions and 1 deletions
--- a/libraries/Error.class.php
+++ b/libraries/Error.class.php
@@ -319,7 +319,7 @@ class PMA_Error extends PMA_Message
        if (in_array($function, $include_functions)) {
            echo PMA_Error::relPath($arg);
        } elseif (is_scalar($arg)) {
-            echo gettype($arg) . ' ' . $arg;
+            echo gettype($arg) . ' ' . htmlspecialchars($arg);
        } else {
            echo gettype($arg);
        }