From 53f70fd7f3b388639922e6cc1ca51fbe890c91cc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Maur=C3=ADcio=20Meneghini=20Fauth?= <mauricio@fauth.dev>
Date: Fri, 5 Aug 2022 19:39:54 -0300
Subject: [PATCH] Fix not escaped title when using drag and drop upload
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Maurício Meneghini Fauth <mauricio@fauth.dev>
---
 js/common.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/js/common.js b/js/common.js
index 28b394b56f..5b8d3daed8 100644
--- a/js/common.js
+++ b/js/common.js
@@ -290,7 +290,7 @@ PMA_DROP_IMPORT = {
                                 var filename = $this.parent('span').attr('data-filename');
                                 $('body').append('<div class="pma_drop_result"><h2>' +
                                 PMA_messages.dropImportImportResultHeader + ' - ' +
-                                filename + '<span class="close">x</span></h2>' + value.message + '</div>');
+                                escapeHtml(filename) + '<span class="close">x</span></h2>' + value.message + '</div>');
                                 $('.pma_drop_result').draggable();  // to make this dialog draggable
                             }
                         });