Skip to content

Commit

Permalink
Fix HTML escaping for db and table parameters on "Privileges" page
Browse files Browse the repository at this point in the history
Signed-off-by: William Desportes <williamdes@wdes.fr>
  • Loading branch information
williamdes committed May 20, 2020
1 parent 1686770 commit 10ef81d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion templates/table/privileges/index.twig
Expand Up @@ -8,7 +8,7 @@
{{ 'Users having access to "%s"'|trans|format('<a href="' ~ table_url ~ get_common({
'db': db,
'table': table
}, '&') ~ '">' ~ db ~ '.' ~ table ~ '</a>')|raw }}
}, '&') ~ '">' ~ db|escape('html') ~ '.' ~ table|escape('html') ~ '</a>')|raw }}
</legend>

<div class="responsivetable jsresponsive">
Expand Down

0 comments on commit 10ef81d

Please sign in to comment.