Use <script> instead of inline event handler in print_fieldset()

diff --git a/adminer/include/functions.inc.php b/adminer/include/functions.inc.php
index abe934a000136709214af852e243b6002b27bb75..475953f9245ebd5998c34adf61b2a8a1097787a1 100644 (file)
--- a/adminer/include/functions.inc.php
+++ b/adminer/include/functions.inc.php
@@ -200,11 +200,14 @@ function confirm($selector = "qsl('input')") {
 * @param string
 * @param string
 * @param bool
-* @param string
 * @return null
 */
-function print_fieldset($id, $legend, $visible = false, $onclick = "") {
-       echo "<fieldset><legend><a href='#fieldset-$id' onclick=\"" . h($onclick) . "return toggle('fieldset-$id');\">$legend</a></legend><div id='fieldset-$id'" . ($visible ? "" : " class='hidden'") . ">\n";
+function print_fieldset($id, $legend, $visible = false) {
+       echo "<fieldset><legend>";
+       echo "<a href='#fieldset-$id'>$legend</a>";
+       echo "<script>qsl('a').onclick = partial(toggle, 'fieldset-$id');</script>";
+       echo "</legend>";
+       echo "<div id='fieldset-$id'" . ($visible ? "" : " class='hidden'") . ">\n";
 }
 
 /** Return class='active' if $bold is true