XSS 취약점 수정

2015-07-14 12:10:44 +09:00
parent 9356fdfaa8
commit 164944dd0c
8 changed files with 19 additions and 5 deletions
--- a/bbs/alert.php
+++ b/bbs/alert.php
@ -30,7 +30,8 @@ include_once(G5_PATH.'/head.sub.php');

 $msg2 = str_replace("\\n", "<br>", $msg);

-if (!$url) $url = $_SERVER['HTTP_REFERER'];
+$url = clean_xss_tags($url);
+if (!$url) $url = clean_xss_tags($_SERVER['HTTP_REFERER']);

 // url 체크
 check_url_host($url);