Merge branch 'MAINT_4_0_2-security' into QA_4_0

2013-05-31 15:31:18 +02:00 · 2013-05-31 15:31:18 +02:00 · b3388dd0c6
commit b3388dd0c6
parent d448add28e 9b3551601c
1 changed files with 2 additions and 1 deletions
--- a/view_create.php
+++ b/view_create.php
@ -114,7 +114,8 @@ if (isset($_REQUEST['createview'])) {
            $response->addJSON(
                'message',
                PMA_Message::error(
-                    "<i>$sql_query</i><br /><br />" . PMA_DBI_getError()
+                    "<i>" . htmlspecialchars($sql_query) . "</i><br /><br />"
+                    . PMA_DBI_getError()
                )
            );
            $response->isSuccess(false);