bug #3115519: fixed XSS on search
This commit is contained in:

committed by
Marc Delisle

parent
e6aeaf1925
commit
e1f4901ffc
@@ -1644,7 +1644,7 @@ function PMA_linkOrButton($url, $message, $tag_params = array(),
|
||||
$tmp = $tag_params;
|
||||
$tag_params = array();
|
||||
if (!empty($tmp)) {
|
||||
$tag_params['onclick'] = 'return confirmLink(this, \'' . $tmp . '\')';
|
||||
$tag_params['onclick'] = 'return confirmLink(this, \'' . PMA_escapeJsString($tmp) . '\')';
|
||||
}
|
||||
unset($tmp);
|
||||
}
|
||||
|
Reference in New Issue
Block a user