You've already forked phpmyadmin
mirror of
https://github.com/phpmyadmin/phpmyadmin.git
synced 2026-10-31 10:54:46 +03:00
Escape navigation tree item names
This commit is contained in:
@@ -187,7 +187,7 @@ class PMA_Navigation
|
||||
$odd = true;
|
||||
foreach ($hidden[$t] as $hiddenItem) {
|
||||
$html .= '<tr class="' . ($odd ? 'odd' : 'even') . '">';
|
||||
$html .= '<td>' . $hiddenItem . '</td>';
|
||||
$html .= '<td>' . htmlspecialchars($hiddenItem) . '</td>';
|
||||
$html .= '<td style="width:80px"><a href="navigation.php?'
|
||||
. PMA_generate_common_url()
|
||||
. '&unhideNavItem=true'
|
||||
|
||||
Reference in New Issue
Block a user