Merge pull request #344 from phpmyadmin/sec/343/49
[4.9] Fix not escaped title when using drag and drop upload
This commit is contained in:
commit
0f685d8a45
@ -290,7 +290,7 @@ PMA_DROP_IMPORT = {
|
||||
var filename = $this.parent('span').attr('data-filename');
|
||||
$('body').append('<div class="pma_drop_result"><h2>' +
|
||||
PMA_messages.dropImportImportResultHeader + ' - ' +
|
||||
filename + '<span class="close">x</span></h2>' + value.message + '</div>');
|
||||
escapeHtml(filename) + '<span class="close">x</span></h2>' + value.message + '</div>');
|
||||
$('.pma_drop_result').draggable(); // to make this dialog draggable
|
||||
}
|
||||
});
|
||||
|
||||
Loading…
Reference in New Issue
Block a user