[KVE-2019-1571,1573,1578,1580]그누보드 XSS 취약점 수정

2020-02-13 13:48:37 +09:00
parent 992d3d93f4
commit 120d8cf564
10 changed files with 17 additions and 17 deletions
--- a/adm/poll_form_update.php
+++ b/adm/poll_form_update.php
@ -40,7 +40,7 @@ foreach( $_POST as $key=>$value ){
    if( empty($value) ) continue;

    if( in_array($key, $check_keys) ) {
-        $_POST[$key] = strip_tags($value);
+        $_POST[$key] = strip_tags(clean_xss_attributes($value));
    }
 }