Hide null byte in HTML (bug #3358372)

diff --git a/adminer/include/functions.inc.php b/adminer/include/functions.inc.php
index dcdb5312749e7b8951c7b5afba37fca07f8e5ece..ff23d730facb5b1a42853d3dead4ba12a07db893 100644 (file)
--- a/adminer/include/functions.inc.php
+++ b/adminer/include/functions.inc.php
@@ -61,7 +61,7 @@ function bracket_escape($idf, $back = false) {
 * @return string
 */
 function h($string) {
-       return htmlspecialchars($string, ENT_QUOTES);
+       return htmlspecialchars(str_replace("\0", "", $string), ENT_QUOTES);
 }
 
 /** Escape for TD