bug #3115519: fixed XSS on search

This commit is contained in:
Herman van Rink
2010-11-25 11:50:50 +01:00
committed by Marc Delisle
parent e356354c44
commit 6d3b66059a

View File

@@ -1769,7 +1769,7 @@ function PMA_linkOrButton($url, $message, $tag_params = array(),
$tmp = $tag_params; $tmp = $tag_params;
$tag_params = array(); $tag_params = array();
if (!empty($tmp)) { if (!empty($tmp)) {
$tag_params['onclick'] = 'return confirmLink(this, \'' . $tmp . '\')'; $tag_params['onclick'] = 'return confirmLink(this, \'' . PMA_escapeJsString($tmp) . '\')';
} }
unset($tmp); unset($tmp);
} }