From 7391d872a90e2f3a34526296b23a4bf1f9e38eff Mon Sep 17 00:00:00 2001 From: Xinyu Liu Date: Mon, 19 Mar 2018 08:06:33 +0000 Subject: [PATCH] Fix improperly escaped HTML code in database structure page #14071 Signed-off-by: Xinyu Liu --- .../Controllers/Database/DatabaseStructureController.php | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/libraries/classes/Controllers/Database/DatabaseStructureController.php b/libraries/classes/Controllers/Database/DatabaseStructureController.php index 27e0cf867b..d42b1e1e4b 100644 --- a/libraries/classes/Controllers/Database/DatabaseStructureController.php +++ b/libraries/classes/Controllers/Database/DatabaseStructureController.php @@ -493,13 +493,10 @@ class DatabaseStructureController extends DatabaseController } } - $truename = htmlspecialchars( - (!empty($tooltip_truename) + $truename = (!empty($tooltip_truename) && isset($tooltip_truename[$current_table['TABLE_NAME']])) ? $tooltip_truename[$current_table['TABLE_NAME']] - : $current_table['TABLE_NAME'] - ); - $truename = str_replace(' ', ' ', $truename); + : $current_table['TABLE_NAME']; $i++;