sanitize table comments in print view

2008-05-03 11:59:52 +00:00
parent 0327fee22b
commit 1af28a7c5f
2 changed files with 3 additions and 1 deletions
--- a/2
+++ b/2
@@ -14,6 +14,8 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
  thanks to Norman Hippert
 - [structure] do not remove the BINARY attribute in drop-down 
 - bug #1955386 [session] Overriding session.hash_bits_per_character 
+- [interface] sanitize the table comments in table print view, 
+  thanks to Norman Hippert

 2.11.6.0 (2008-04-29)
 - bug #1903724 [interface] Displaying of very large queries in error message 
--- a/tbl_printview.php
+++ b/tbl_printview.php
@@ -148,7 +148,7 @@ foreach ($the_tables as $key => $table) {
     * Displays the comments of the table if MySQL >= 3.23
     */
    if (!empty($show_comment)) {
-        echo $strTableComments . ': ' . $show_comment . '<br /><br />';
+        echo $strTableComments . ': ' . htmlspecialchars($show_comment) . '<br /><br />';
    }

    /**