From fb50fd2efe85f85a2b7cee9ad2f83cb57fde15cf Mon Sep 17 00:00:00 2001
From: Kasun Chathuranga <chathuranga.jayaneththi@gmail.com>
Date: Sun, 14 Jul 2013 00:40:53 +0530
Subject: [PATCH] Use htmlspecialchars

---
 libraries/server_privileges.lib.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/libraries/server_privileges.lib.php b/libraries/server_privileges.lib.php
index de2baa687e..1f19b154d7 100644
--- a/libraries/server_privileges.lib.php
+++ b/libraries/server_privileges.lib.php
@@ -3141,7 +3141,8 @@ function PMA_getHtmlForDisplayUserOverviewPage($link_edit, $pmaThemeImage,
  */
 function PMA_getHtmlForListingUsersofAGroup($userGroup)
 {
-    $html_output  = '<h2>' . sprintf(__('Users of \'%s\' user group'), $userGroup)
+    $html_output  = '<h2>'
+        . sprintf(__('Users of \'%s\' user group'), htmlspecialchars($userGroup))
         . '</h2>';
 
     $usersTable = PMA_Util::backquote($GLOBALS['cfg']['Server']['pmadb'])