nettika/phpmyadmin
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[security] XSS: Insufficient output sanitizing in bookmarks

Browse Source
This commit is contained in:
Marc Delisle
2009-06-30 10:48:08 +00:00
parent 5b7dd4fa60
commit 76e2d1550f
3 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
ChangeLog
View File

@@ -15,6 +15,9 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
- bug #2809930 [setup] Notice: Undefined variable: k in setup/index.php - bug #2809930 [setup] Notice: Undefined variable: k in setup/index.php
- bug [features] Incorrect report of missing relational features - bug [features] Incorrect report of missing relational features
3.2.0.1 (2009-06-30)
- [security] XSS: Insufficient output sanitizing in bookmarks
3.2.0.0 (2009-06-15) 3.2.0.0 (2009-06-15)
- [core] better support for vendor customisation (based on what Debian needs) - [core] better support for vendor customisation (based on what Debian needs)
+ rfe #2127987 warn when session.gc_maxlifetime is less than cookie validity + rfe #2127987 warn when session.gc_maxlifetime is less than cookie validity

2
libraries/common.lib.php
View File

@@ -305,7 +305,7 @@ function PMA_formatSql($parsed_sql, $unparsed_sql = '')
// well, not quite // well, not quite
// first check for the SQL parser having hit an error // first check for the SQL parser having hit an error
if (PMA_SQP_isError()) { if (PMA_SQP_isError()) {
return $parsed_sql; return htmlspecialchars($parsed_sql['raw']);
} }
// then check for an array // then check for an array
if (!is_array($parsed_sql)) { if (!is_array($parsed_sql)) {

2
sql.php
View File

@@ -311,7 +311,7 @@ if (isset($GLOBALS['show_as_php']) || !empty($GLOBALS['validatequery'])) {
$table = ''; $table = '';
} }
$active_page = $goto; $active_page = $goto;
$message = PMA_Message::rawError($error); $message = htmlspecialchars(PMA_Message::rawError($error));
/** /**
* Go to target path. * Go to target path.
*/ */