Skip to content

Commit 57ae483

Browse files
committed
Escape database name when showing dialog
Signed-off-by: Michal Čihař <michal@cihar.com>
1 parent 960fd1f commit 57ae483

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Diff for: js/functions.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -3534,7 +3534,7 @@ AJAX.registerOnload('functions.js', function () {
35343534
var result_pointer = i;
35353535
var search_in = '<input type="text" class="filter_rows" placeholder="' + PMA_messages.searchList + '">';
35363536
if (fields === '') {
3537-
fields = PMA_sprintf(PMA_messages.strEmptyCentralList, "'" + db + "'");
3537+
fields = PMA_sprintf(PMA_messages.strEmptyCentralList, "'" + escapeHtml(db) + "'");
35383538
search_in = '';
35393539
}
35403540
var seeMore = '';

0 commit comments

Comments
 (0)