Fix XSS on bytea, reported by basteln3rk on sf.net

See discussion on bug #441:
  http://sourceforge.net/p/phppgadmin/bugs/441/

diff --git a/classes/database/Postgres.php b/classes/database/Postgres.php
index 73ea2af86b6a093fdd81dd528e81c952951e317a..4ab71646ad54fccfb6aba6eb1cbe718d90f66c12 100755 (executable)
--- a/classes/database/Postgres.php
+++ b/classes/database/Postgres.php
@@ -230,7 +230,7 @@ class Postgres extends ADODB_base {
         * @return Data formatted for on-screen display
         */
        function escapeBytea($data) {
-               return $data;
+               return htmlentities($data, ENT_QUOTES, 'UTF-8');
        }
 
        /**