adjust table comments protection to the updated advisory (db print view and db data dictionary)

2008-06-21 13:16:05 +00:00
parent 4e76dc40a3
commit b031606c08
3 changed files with 3 additions and 3 deletions
--- a/db_datadict.php
+++ b/db_datadict.php
@@ -164,7 +164,7 @@ while ($row = PMA_DBI_fetch_assoc($rowset)) {
     * Displays the comments of the table if MySQL >= 3.23
     */
    if (!empty($show_comment)) {
-        echo $strTableComments . ': ' . $show_comment . '<br /><br />';
+        echo $strTableComments . ': ' . htmlspecialchars($show_comment) . '<br /><br />';
    }

    /**