Escape user group when displaying

Signed-off-by: Michal Čihař <michal@cihar.com>
phpmyadmin · Jun 22, 2016 · 0b7416c · 0b7416c
1 parent 792cd12
commit 0b7416c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libraries/server_privileges.lib.php b/libraries/server_privileges.lib.php
@@ -3679,7 +3679,7 @@ function PMA_getHtmlTableBodyForUserRights($db_rights)
             if ($cfgRelation['menuswork']) {
                 $html_output .= '<td class="usrGroup">' . "\n"
                     . (isset($group_assignment[$host['User']])
-                        ? $group_assignment[$host['User']]
+                        ? htmlspecialchars($group_assignment[$host['User']])
                         : ''
                     )
                     . '</td>' . "\n";