Fix for Empty and Drop vulnerabilities on db Structure and Operations, see PMASA-2012-4
This commit is contained in:

committed by
Dieter Adriaenssens

parent
3345d64a6f
commit
d84b98d340
@@ -75,7 +75,7 @@ $(document).ready(function() {
|
|||||||
/**
|
/**
|
||||||
* @var question String containing the question to be asked for confirmation
|
* @var question String containing the question to be asked for confirmation
|
||||||
*/
|
*/
|
||||||
var question = 'TRUNCATE ' + curr_table_name;
|
var question = 'TRUNCATE ' + escapeHtml(curr_table_name);
|
||||||
|
|
||||||
$this_anchor.PMA_confirm(question, $this_anchor.attr('href'), function(url) {
|
$this_anchor.PMA_confirm(question, $this_anchor.attr('href'), function(url) {
|
||||||
|
|
||||||
@@ -125,7 +125,7 @@ $(document).ready(function() {
|
|||||||
/**
|
/**
|
||||||
* @var question String containing the question to be asked for confirmation
|
* @var question String containing the question to be asked for confirmation
|
||||||
*/
|
*/
|
||||||
var question = 'DROP TABLE ' + curr_table_name;
|
var question = 'DROP TABLE ' + escapeHtml(curr_table_name);
|
||||||
|
|
||||||
$this_anchor.PMA_confirm(question, $this_anchor.attr('href'), function(url) {
|
$this_anchor.PMA_confirm(question, $this_anchor.attr('href'), function(url) {
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user