From b293ff5f234ef493336ed8638f623a12164d359e Mon Sep 17 00:00:00 2001
From: Eddie Chang <eddietcchang@gmail.com>
Date: Fri, 7 Dec 2018 16:28:48 +1100
Subject: [PATCH] Fix
 https://github.com/phpmyadmin/phpmyadmin-security/issues/260 Stored
 Cross-Site Scripting (XSS) in navigation tree

Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
---
 libraries/classes/Navigation/NavigationTree.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libraries/classes/Navigation/NavigationTree.php b/libraries/classes/Navigation/NavigationTree.php
index dbbdf3fad7..82325ddd65 100644
--- a/libraries/classes/Navigation/NavigationTree.php
+++ b/libraries/classes/Navigation/NavigationTree.php
@@ -762,7 +762,7 @@ class NavigationTree
                 }
 
                 $groups[$key] = new Node(
-                    $key,
+                    htmlspecialchars($key),
                     Node::CONTAINER,
                     true
                 );