From 2bfb20e57418ebf396149782be9f98e868fe8608 Mon Sep 17 00:00:00 2001
From: Christian Foellmann <foellmann@foe-services.de>
Date: Tue, 23 Dec 2014 12:48:13 +0100
Subject: UPDATE 4.3.3

---
 url.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'url.php')

diff --git a/url.php b/url.php
index 71efc9fb6b..82b224311b 100644
--- a/url.php
+++ b/url.php
@@ -11,6 +11,10 @@
  */
 define('PMA_MINIMUM_COMMON', true);
 require_once './libraries/common.inc.php';
+/**
+ * JavaScript escaping.
+ */
+require_once './libraries/js_escape.lib.php';
 
 if (! PMA_isValid($_GET['url'])
     || ! preg_match('/^https?:\/\/[^\n\r]*$/', $_GET['url'])
@@ -24,7 +28,7 @@ if (! PMA_isValid($_GET['url'])
     //  external site.
     echo "<script type='text/javascript'>
             window.onload=function(){
-                window.location='" . htmlspecialchars($_GET['url']) . "';
+                window.location='" . PMA_escapeJsString($_GET['url']) . "';
             }
         </script>";
     // Display redirecting msg on screen.
-- 
cgit v1.2.3