Harold Kim

do you have plans to file up CVE on this issue? https://github.com/vrana/adminer/security/advisories my GitHub ID is stypr.

I checked back the issue and I found out some root cause of triggers here. I've installed the adminer with the default docker setup. By the default installation, adminer comes with error_reporting(6135); https://github.com/vrana/adminer/blob/f6880b59d6ab40444407616701c1376c90aba5a5/compile.php#L7 The problem with this is that the CSP header gets discarded since the error is sent even before the CSP headers are set. I guess it is better off to use the header before the actual call. tested in latest...

XSS via the table parameter