Escape HTML in titles of table charts

1 files changed, 4 insertions, 2 deletions

diff --git a/js/tbl_chart.js b/js/tbl_chart.js
index 6e395e72c1..f139ca06e7 100644
--- a/js/tbl_chart.js
+++ b/js/tbl_chart.js
@@ -53,6 +53,7 @@ $(document).ready(function() {
         },
         title: {
             text: $('input[name="chartTitle"]').attr('value')
+            escapeHtml: true,
             //margin:20
         },
         legend: {
@@ -245,7 +246,8 @@ function PMA_queryChart(data, passedSettings, passedNonJqplotSettings)
 
     var settings = {
         title: {
-            text: '' 
+            text: ''
+            escapeHtml: true,
             //margin:20
         }
     };
@@ -279,7 +281,7 @@ function PMA_queryChart(data, passedSettings, passedNonJqplotSettings)
     if (passedNonJqplotSettings.chart.type == 'spline') {
         settings.seriesDefaults = {
             rendererOptions: {
-                smooth: true 
+                smooth: true
             }
         };
     }