← Back to branch summary

~ubuntu-branches/ubuntu/precise/phpmyadmin/precise

« back to all changes in this revision

Viewing changes to libraries/tbl_links.inc.php

  • Committer: Bazaar Package Importer
  • Author(s): Michal Čihař
  • Date: 2011-05-23 13:34:36 UTC
  • mfrom: (1.2.23 upstream)
  • Revision ID: james.westby@ubuntu.com-20110523133436-t5i4jwhoadtv7zka
Tags: 4:3.4.1-1
* New upstream release.
  - Fixes XSS in tracking (PMASA-2011-3).
  - Fixes URL redirection (PMASA-2011-4).
* Drop debian/rules hacks no longer needed.

Show diffs side-by-side

added added

removed removed

Lines of Context:
libraries/tbl_links.inc.php
112
112
 
113
113
if(PMA_Tracker::isActive() and PMA_Tracker::isTracked($GLOBALS["db"], $GLOBALS["table"]))
114
114
{
115
 
    $msg = PMA_Message::notice('<a href="tbl_tracking.php?'.$url_query.'">'.sprintf(__('Tracking of %s.%s is activated.'), $GLOBALS["db"], $GLOBALS["table"]).'</a>');
 
115
    $msg = PMA_Message::notice('<a href="tbl_tracking.php?'.$url_query.'">'.sprintf(__('Tracking of %s.%s is activated.'), htmlspecialchars($GLOBALS["db"]), htmlspecialchars($GLOBALS["table"])).'</a>');
116
116
    $msg->display();
117
117
}
118
118