Escape backtrace listing to avoid possible XSS on this.

This commit is contained in:
Michal Čihař
2010-08-23 17:05:53 +02:00
parent a24e418527
commit 133a77fac7

View File

@@ -319,7 +319,7 @@ class PMA_Error extends PMA_Message
if (in_array($function, $include_functions)) { if (in_array($function, $include_functions)) {
echo PMA_Error::relPath($arg); echo PMA_Error::relPath($arg);
} elseif (is_scalar($arg)) { } elseif (is_scalar($arg)) {
echo gettype($arg) . ' ' . $arg; echo gettype($arg) . ' ' . htmlspecialchars($arg);
} else { } else {
echo gettype($arg); echo gettype($arg);
} }