Escape error message from server

Signed-off-by: Michal Čihař <michal@cihar.com>
phpmyadmin · Jun 20, 2016 · 364732e · 364732e
1 parent 895a131
commit 364732e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/js/console.js b/js/console.js
@@ -201,7 +201,7 @@ var PMA_console = {
                 } catch (e) {
                     console.log("Invalid JSON!" + e.message);
                     if (AJAX.xhr && AJAX.xhr.status === 0 && AJAX.xhr.statusText !== 'abort') {
-                        PMA_ajaxShowMessage($('<div />',{'class':'error','html':PMA_messages.strRequestFailed+' ( '+AJAX.xhr.statusText+' )'}));
+                        PMA_ajaxShowMessage($('<div />',{'class':'error','html':PMA_messages.strRequestFailed+' ( '+escapeHtml(AJAX.xhr.statusText)+' )'}));
                         AJAX.active = false;
                         AJAX.xhr = null;
                     }