Merge pull request #20 from phpmyadmin/xss-host

Urlencode hostname
2016-02-25 11:57:24 +01:00 · 2016-02-25 11:57:24 +01:00 · 155876b48f
commit 155876b48f
parent 45ecc10d18 73c8245a3d
1 changed files with 1 additions and 1 deletions
--- a/libraries/Config.class.php
+++ b/libraries/Config.class.php
@ -1291,7 +1291,7 @@ class PMA_Config
                $pma_absolute_uri .= '@';
            }
            // Add hostname
-            $pma_absolute_uri .= $url['host'];
+            $pma_absolute_uri .= urlencode($url['host']);
            // Add port, if it not the default one
            if (! empty($url['port'])
                && (($url['scheme'] == 'http' && $url['port'] != 80)