Missing escaping

2011-08-19 11:54:34 +02:00
parent 5146970826
commit e7d6cab2a2
1 changed files with 1 additions and 1 deletions
--- a/db_datadict.php
+++ b/db_datadict.php
@@ -65,7 +65,7 @@ while ($row = PMA_DBI_fetch_assoc($rowset)) {

    echo '<div>' . "\n";

-    echo '<h2>' . $table . '</h2>' . "\n";
+    echo '<h2>' . htmlspecialchars($table) . '</h2>' . "\n";

    /**
     * Gets table informations