Escape HTML for index drop confirmation message

This commit is contained in:
Marc Delisle 2013-01-28 07:21:45 -05:00
parent 0c8eb9aeee
commit d4730db69c

View File

@ -140,7 +140,11 @@ $(document).ready(function() {
$rows_to_hide = $rows_to_hide.add($last_row);
}
var question = $curr_row.children('td').children('.drop_primary_key_index_msg').val();
var question = escapeHtml(
$curr_row.children('td')
.children('.drop_primary_key_index_msg')
.val()
);
$anchor.PMA_confirm(question, $anchor.attr('href'), function(url) {