Escape backtrace listing to avoid possible XSS on this.
This commit is contained in:
@@ -319,7 +319,7 @@ class PMA_Error extends PMA_Message
|
|||||||
if (in_array($function, $include_functions)) {
|
if (in_array($function, $include_functions)) {
|
||||||
echo PMA_Error::relPath($arg);
|
echo PMA_Error::relPath($arg);
|
||||||
} elseif (is_scalar($arg)) {
|
} elseif (is_scalar($arg)) {
|
||||||
echo gettype($arg) . ' ' . $arg;
|
echo gettype($arg) . ' ' . htmlspecialchars($arg);
|
||||||
} else {
|
} else {
|
||||||
echo gettype($arg);
|
echo gettype($arg);
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user