bug #3115519: fixed XSS on search
This commit is contained in:

committed by
Marc Delisle

parent
e356354c44
commit
6d3b66059a
@@ -1769,7 +1769,7 @@ function PMA_linkOrButton($url, $message, $tag_params = array(),
|
||||
$tmp = $tag_params;
|
||||
$tag_params = array();
|
||||
if (!empty($tmp)) {
|
||||
$tag_params['onclick'] = 'return confirmLink(this, \'' . $tmp . '\')';
|
||||
$tag_params['onclick'] = 'return confirmLink(this, \'' . PMA_escapeJsString($tmp) . '\')';
|
||||
}
|
||||
unset($tmp);
|
||||
}
|
||||
|
Reference in New Issue
Block a user