Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/phpmyadmin/phpmyadmin.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMadhura Jayaratne <madhura.cj@gmail.com>2016-02-25 13:38:32 +0300
committerMichal Čihař <michal@cihar.com>2016-02-25 15:08:43 +0300
commitf33a42f1da9db943a67bda7d29f7dd91957a8e7e (patch)
treed582cffb01379cb7e376a6e175b31870f465e4e0 /js/normalization.js
parentb3d36dc836df31a7d1b1c4f61f578a9b42bd1f98 (diff)
Fix XSS in normalization.js
Signed-off-by: Madhura Jayaratne <madhura.cj@gmail.com>
Diffstat (limited to 'js/normalization.js')
-rw-r--r--js/normalization.js2
1 files changed, 1 insertions, 1 deletions
diff --git a/js/normalization.js b/js/normalization.js
index 196e83aed9..50ad3ed39f 100644
--- a/js/normalization.js
+++ b/js/normalization.js
@@ -638,7 +638,7 @@ AJAX.registerOnload('normalization.js', function() {
'</ol>';
$("#newCols").html(confirmStr);
$('.tblFooters').html('<input type="submit" value="' + PMA_messages.strCancel + '" onclick="$(\'#newCols\').html(\'\');$(\'#extra input[type=checkbox]\').removeAttr(\'checked\')"/>' +
- '<input type="submit" value="' + PMA_messages.strGo + '" onclick="moveRepeatingGroup(\'' + repeatingCols + '\')"/>');
+ '<input type="submit" value="' + PMA_messages.strGo + '" onclick="moveRepeatingGroup(\'' + escapeJsString(escapeHtml(repeatingCols)) + '\')"/>');
}
});
$("#mainContent p").on("click", "#createPrimaryKey", function(event) {