From d2f83c12edda9c38835a5a0561d781a6284baf91 Mon Sep 17 00:00:00 2001
From: Robert Sesek <rsesek@bluestatic.org>
Date: Tue, 4 Jun 2013 01:19:52 -0400
Subject: [PATCH] Escape the callstack function args in
 ProfilingPDO::ConstructHTMLDebugBlock().

---
 data/profiling_pdo.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/data/profiling_pdo.php b/data/profiling_pdo.php
index f415020..4b1a9d2 100644
--- a/data/profiling_pdo.php
+++ b/data/profiling_pdo.php
@@ -18,6 +18,7 @@ namespace hoplite\data;
 
 use \hoplite\base\Profiling;
 
+require_once HOPLITE_ROOT . '/base/filter.php';
 require_once HOPLITE_ROOT . '/base/profiling.php';
 
 /*!
@@ -117,7 +118,7 @@ class ProfilingPDO extends \PDO
       $debug .= "\n\t\t\t$query[query]\n\n";
       if (isset($query['params'])) {
         $debug .= "\t\t\t<ol>\n\t\t\t\t<li>";
-        $debug .= implode("</li>\n\t\t\t\t<li>", $query['params']);
+        $debug .= implode("</li>\n\t\t\t\t<li>", \hoplite\base\filter\String($query['params']));
         $debug .= "</li>\n\t\t\t</ol>\n";
       }
       $debug .= "\n\t\t\t<div style=\"font-size: 9px;\">(" .
-- 
2.43.5