Error can possibly contain html chars and should be escaped
This commit is contained in:
@@ -116,7 +116,7 @@ class PMA_Error_Handler
|
|||||||
public function handleError($errno, $errstr, $errfile, $errline)
|
public function handleError($errno, $errstr, $errfile, $errline)
|
||||||
{
|
{
|
||||||
// create error object
|
// create error object
|
||||||
$error = new PMA_Error($errno, $errstr, $errfile, $errline);
|
$error = new PMA_Error($errno, htmlspecialchars($errstr), $errfile, $errline);
|
||||||
|
|
||||||
// do not repeat errors
|
// do not repeat errors
|
||||||
$this->_errors[$error->getHash()] = $error;
|
$this->_errors[$error->getHash()] = $error;
|
||||||
|
Reference in New Issue
Block a user