Please note that security bugs or issues should be reported to security@pgadmin.org.
Describe the bug
Database name is missing in notification message if database name contains special characters
To Reproduce
Steps to reproduce the behavior:
- Create Database with name <script>alert('Hi')</script>
- Open query tool for same database node.
- Try to delete it from the context menu using the "Delete" option and click on OK to delete the database.
- It shows an error unable to delete the database as other sessions using it, check it is showing double quotes("") instead of the database name.
- If we try the same steps with the database name without special characters it is working fine.
Expected behavior
It should show the database name instead of just double quotes ("")
Desktop (please complete the following information):
- OS: macOS (Ventura 13.3)
- Version: 7.13
- Mode: Desktop