Escape HTML when rendering AJAX error

Signed-off-by: Michal Čihař <michal@cihar.com>
This commit is contained in:
Michal Čihař 2016-06-20 10:06:42 +02:00
parent abfd97983a
commit 02971f754f

View File

@ -808,8 +808,8 @@ $(document).ajaxError(function(event, request, settings){
PMA_ajaxShowMessage(
'<div class="error">'
+ PMA_messages['strErrorProcessingRequest']
+ '<div>' + errorCode + '</div>'
+ '<div>' + errorText + '</div>'
+ '<div>' + escapeHtml(errorCode) + '</div>'
+ '<div>' + escapeHtml(errorText) + '</div>'
+ '</div>',
false
);