add missing string escapes

don't create <a> tag if LeftLogoLink is empty
2010-07-14 17:07:19 +02:00
parent 030abc5114
commit 60285cd665
2 changed files with 20 additions and 16 deletions
--- a/libraries/header_scripts.inc.php
+++ b/libraries/header_scripts.inc.php
@@ -82,7 +82,7 @@ foreach ($GLOBALS['js_include'] as $js_script_file) {
 // Updates the title of the frameset if possible (ns4 does not allow this)
 if (typeof(parent.document) != 'undefined' && typeof(parent.document) != 'unknown'
    && typeof(parent.document.title) == 'string') {
-    parent.document.title = '<?php echo PMA_sanitize(PMA_escapeJsString($title)); ?>';
+    parent.document.title = '<?php echo PMA_sanitize(PMA_escapeJsString(htmlspecialchars($title))); ?>';
 }

 <?php