Merge remote-tracking branch 'security/QA_5_2-security' into QA_5_2

phpmyadmin · Feb 7, 2023 · e9b1db6 · e9b1db6
2 parents e95c377 + 185f521
commit e9b1db6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/js/src/drag_drop_import.js b/js/src/drag_drop_import.js
@@ -130,7 +130,7 @@ var DragDropImport = {
                                 var filename = $this.parent('span').attr('data-filename');
                                 $('body').append('<div class="pma_drop_result"><h2>' +
                                 Messages.dropImportImportResultHeader + ' - ' +
-                                filename + '<span class="close">x</span></h2>' + value.message + '</div>');
+                                Functions.escapeHtml(filename) + '<span class="close">x</span></h2>' + value.message + '</div>');
                                 $('.pma_drop_result').draggable();  // to make this dialog draggable
                             }
                         });