Merge pull request #344 from phpmyadmin/sec/343/49

[4.9] Fix not escaped title when using drag and drop upload
This commit is contained in:
Isaac Bennetch 2023-02-07 13:43:38 -05:00 committed by GitHub
commit 0f685d8a45
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -290,7 +290,7 @@ PMA_DROP_IMPORT = {
var filename = $this.parent('span').attr('data-filename');
$('body').append('<div class="pma_drop_result"><h2>' +
PMA_messages.dropImportImportResultHeader + ' - ' +
filename + '<span class="close">x</span></h2>' + value.message + '</div>');
escapeHtml(filename) + '<span class="close">x</span></h2>' + value.message + '</div>');
$('.pma_drop_result').draggable(); // to make this dialog draggable
}
});