From 7e968cf30e811fd2dc51ae754907d01049468505 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <mcihar@suse.cz>
Date: Tue, 15 Jan 2013 09:10:48 +0100
Subject: [PATCH] Escape HTML in titles of table charts

---
 js/tbl_chart.js | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/js/tbl_chart.js b/js/tbl_chart.js
index 6e395e72c1..f139ca06e7 100644
--- a/js/tbl_chart.js
+++ b/js/tbl_chart.js
@@ -53,6 +53,7 @@ $(document).ready(function() {
         },
         title: {
             text: $('input[name="chartTitle"]').attr('value')
+            escapeHtml: true,
             //margin:20
         },
         legend: {
@@ -245,7 +246,8 @@ function PMA_queryChart(data, passedSettings, passedNonJqplotSettings)
 
     var settings = {
         title: {
-            text: '' 
+            text: ''
+            escapeHtml: true,
             //margin:20
         }
     };
@@ -279,7 +281,7 @@ function PMA_queryChart(data, passedSettings, passedNonJqplotSettings)
     if (passedNonJqplotSettings.chart.type == 'spline') {
         settings.seriesDefaults = {
             rendererOptions: {
-                smooth: true 
+                smooth: true
             }
         };
     }