Fix for Empty and Drop vulnerabilities on db Structure and Operations, see PMASA-2012-4
This commit is contained in:

committed by
Dieter Adriaenssens

parent
3345d64a6f
commit
d84b98d340
@@ -75,7 +75,7 @@ $(document).ready(function() {
|
||||
/**
|
||||
* @var question String containing the question to be asked for confirmation
|
||||
*/
|
||||
var question = 'TRUNCATE ' + curr_table_name;
|
||||
var question = 'TRUNCATE ' + escapeHtml(curr_table_name);
|
||||
|
||||
$this_anchor.PMA_confirm(question, $this_anchor.attr('href'), function(url) {
|
||||
|
||||
@@ -125,7 +125,7 @@ $(document).ready(function() {
|
||||
/**
|
||||
* @var question String containing the question to be asked for confirmation
|
||||
*/
|
||||
var question = 'DROP TABLE ' + curr_table_name;
|
||||
var question = 'DROP TABLE ' + escapeHtml(curr_table_name);
|
||||
|
||||
$this_anchor.PMA_confirm(question, $this_anchor.attr('href'), function(url) {
|
||||
|
||||
|
Reference in New Issue
Block a user