Backported fix for PMASA-2011-9 to 3.3

2011-07-22 20:14:50 +02:00
parent 630b8260be
commit 8ac8328229
1 changed files with 2 additions and 2 deletions
--- a/tbl_printview.php
+++ b/tbl_printview.php
@@ -72,7 +72,7 @@ if ($multi_tables) {
        $tbl_list .= (empty($tbl_list) ? '' : ', ')
                  . PMA_backquote($table);
    }
-    echo '<strong>'.  $strShowTables . ': ' . $tbl_list . '</strong>' . "\n";
+    echo '<strong>'.  $strShowTables . ': ' . htmlspecialchars($tbl_list) . '</strong>' . "\n";
    echo '<hr />' . "\n";
 } // end if

@@ -87,7 +87,7 @@ foreach ($the_tables as $key => $table) {
    }
    $counter++;
    echo '<div' . $breakstyle . '>' . "\n";
-    echo '<h1>' . $table . '</h1>' . "\n";
+    echo '<h1>' .  htmlspecialchars($table) . '</h1>' . "\n";

    /**
     * Gets table informations