From a715441a07a44cd96fbe7ee884c2d424b1437acc Mon Sep 17 00:00:00 2001
From: Kasun Chathuranga <chathuranga.jayaneththi@gmail.com>
Date: Tue, 23 Jul 2013 09:47:55 +0530
Subject: [PATCH] Escape navigation tree item names

---
 libraries/navigation/Navigation.class.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/libraries/navigation/Navigation.class.php b/libraries/navigation/Navigation.class.php
index b2065befe3..320110ab3d 100644
--- a/libraries/navigation/Navigation.class.php
+++ b/libraries/navigation/Navigation.class.php
@@ -187,7 +187,7 @@ class PMA_Navigation
                     $odd = true;
                     foreach ($hidden[$t] as $hiddenItem) {
                         $html .= '<tr class="' . ($odd ? 'odd' : 'even') . '">';
-                        $html .= '<td>' . $hiddenItem . '</td>';
+                        $html .= '<td>' . htmlspecialchars($hiddenItem) . '</td>';
                         $html .= '<td style="width:80px"><a href="navigation.php?'
                             . PMA_generate_common_url()
                             . '&unhideNavItem=true'