From 792cd1262f012b9b13639519d414f2acaeb5e972 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
Date: Wed, 22 Jun 2016 10:26:50 +0200
Subject: [PATCH] Escape partition comment when displaying
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Michal Čihař <michal@cihar.com>
---
 templates/table/structure/display_partitions.phtml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/table/structure/display_partitions.phtml b/templates/table/structure/display_partitions.phtml
index 2afdb4d98b..41908266cb 100644
--- a/templates/table/structure/display_partitions.phtml
+++ b/templates/table/structure/display_partitions.phtml
@@ -74,7 +74,7 @@ use PMA\libraries\Util; ?>
                             <span><?= $value; ?></span>
                             <span class="unit"><?= $unit; ?></span>
                         </td>
-                        <td><?= $partition->getComment(); ?></td>
+                        <td><?= htmlspecialchars($partition->getComment()); ?></td>
                         <?php foreach ($actionIcons as $action => $icon): ?>
                             <td>
                                 <a  href="tbl_structure.php<?= $url_query; ?>&amp;partition_maintenance=1&amp;sql_query=<?= urlencode(