Bug 4544: additional fix for 4.2.x

Signed-off-by: Marc Delisle <marc@infomarc.info>
phpmyadmin · Oct 1, 2014 · 9cb2f3e · 9cb2f3e
1 parent 6c9c0b5
commit 9cb2f3e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/libraries/TableSearch.class.php b/libraries/TableSearch.class.php
@@ -992,7 +992,8 @@ private function _getRowsNormal()
             $html_output .= '<td>' . $properties['collation'] . '</td>';
             $html_output .= '<td>' . $properties['func'] . '</td>';
             // here, the data-type attribute is needed for a date/time picker
-            $html_output .= '<td data-type="' . $properties['type'] . '"'
+            $html_output .= '<td data-type="'
+                . htmlspecialchars($properties['type']) . '"'
                 . '>' . $properties['value'] . '</td>';
             $html_output .= '</tr>';
             //Displays hidden fields