Escape javascript variable content

Signed-off-by: Michal Čihař <michal@cihar.com>
2016-01-25 12:21:48 +01:00 · 2016-01-25 12:21:48 +01:00 · aca42efa01
commit aca42efa01
parent 316792bf4a
1 changed files with 2 additions and 2 deletions
--- a/templates/header_location.phtml
+++ b/templates/header_location.phtml
@ -25,8 +25,8 @@ $uri = isset($uri) ? $uri : null;
 <body>
 <script type="text/javascript">
    //<![CDATA[
-    document.write('<p><a href="<?php echo htmlspecialchars($uri) ?>"><?php echo __('Go') ?></a></p>');
+    document.write('<p><a href="<?php echo PMA_escapeJsString(htmlspecialchars($uri)) ?>"><?php echo __('Go') ?></a></p>');
    //]]>
 </script>
 </body>
-</html>
+</html>