From e195d7cb41c2a02c9affcd008cb50efdd167a78e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= <michal@cihar.com>
Date: Mon, 15 Aug 2011 17:35:37 +0200
Subject: [PATCH] Escape possible < coming from PMA_formatNumber

---
 server_status.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/server_status.php b/server_status.php
index 52b9d894bc..4590812e62 100644
--- a/server_status.php
+++ b/server_status.php
@@ -900,11 +900,11 @@ function printQueryStatistics()
     ?>
             <tr class="<?php echo $odd_row ? 'odd' : 'even'; ?>">
                 <th class="name"><?php echo htmlspecialchars($name); ?></th>
-                <td class="value"><?php echo PMA_formatNumber($value, 5, 0, true); ?></td>
+                <td class="value"><?php echo htmlspecialchars(PMA_formatNumber($value, 5, 0, true)); ?></td>
                 <td class="value"><?php echo
-                    PMA_formatNumber($value * $hour_factor, 4, 1, true); ?></td>
+                    htmlspecialchars(PMA_formatNumber($value * $hour_factor, 4, 1, true)); ?></td>
                 <td class="value"><?php echo
-                    PMA_formatNumber($value * $perc_factor, 0, 2); ?>%</td>
+                    htmlspecialchars(PMA_formatNumber($value * $perc_factor, 0, 2)); ?>%</td>
             </tr>
     <?php
     }