From d4730db69c29fa7da8cb67fdfe7e2a5eff123e2d Mon Sep 17 00:00:00 2001 From: Marc Delisle Date: Mon, 28 Jan 2013 07:21:45 -0500 Subject: [PATCH] Escape HTML for index drop confirmation message --- js/tbl_structure.js | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/js/tbl_structure.js b/js/tbl_structure.js index 7f32705dda..9833c2efdd 100644 --- a/js/tbl_structure.js +++ b/js/tbl_structure.js @@ -140,7 +140,11 @@ $(document).ready(function() { $rows_to_hide = $rows_to_hide.add($last_row); } - var question = $curr_row.children('td').children('.drop_primary_key_index_msg').val(); + var question = escapeHtml( + $curr_row.children('td') + .children('.drop_primary_key_index_msg') + .val() + ); $anchor.PMA_confirm(question, $anchor.attr('href'), function(url) {