adjust table comments protection to the updated advisory (db print view and db data dictionary)

1 files changed, 1 insertions, 1 deletions

diff --git a/db_printview.php b/db_printview.php
index ed9baac80c..9b53f0cb41 100644
--- a/db_printview.php
+++ b/db_printview.php
@@ -166,7 +166,7 @@ else {
     <td>
         <?php
         if (! empty($sts_data['Comment'])) {
-            echo $sts_data['Comment'];
+            echo htmlspecialchars($sts_data['Comment']);
             $needs_break = '<br />';
         } else {
             $needs_break = '';