Merge branch 'QA_4_6'

This commit is contained in:
Michal Čihař 2016-09-16 09:48:40 +02:00
commit ddb16a9ca1
2 changed files with 9 additions and 0 deletions

View File

@ -58,6 +58,7 @@ phpMyAdmin - ChangeLog
- issue #12545 Proper parsing of CREATE TABLE ... PARTITION queries
- issue #12473 Code can throw unhandled exception
- issue #12550 Do not try to keep alive session even after expiry
- issue #12512 Fixed rendering BBCode links in setup
4.6.4 (2016-08-16)
- issue [security] Weaknesses with cookie encryption, see PMASA-2016-29

View File

@ -53,6 +53,14 @@ class Sanitize
'./server_privileges.php?',
'./tbl_structure.php?',
);
// Adjust path to setup script location
if (defined('PMA_SETUP')) {
foreach ($valid_starts as $key => $value) {
if (substr($value, 0, 2) === './') {
$valid_starts[$key] = '.' . $value;
}
}
}
if ($other) {
$valid_starts[] = 'mailto:';
$valid_starts[] = 'ftp://';