Skip to content
Permalink
Browse files Browse the repository at this point in the history
Escape HTML when rendering AJAX error
Signed-off-by: Michal Čihař <michal@cihar.com>
  • Loading branch information
nijel committed Jun 20, 2016
1 parent 7966161 commit 895a131
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions js/ajax.js
Expand Up @@ -787,8 +787,8 @@ $(document).ajaxError(function (event, request, settings) {
PMA_ajaxShowMessage(
'<div class="error">' +
PMA_messages.strErrorProcessingRequest +
'<div>' + errorCode + '</div>' +
'<div>' + errorText + '</div>' +
'<div>' + escapeHtml(errorCode) + '</div>' +
'<div>' + escapeHtml(errorText) + '</div>' +
'</div>',
false
);
Expand Down

0 comments on commit 895a131

Please sign in to comment.