sql injection 보안패치 및 스마트에디터2 추가

2014-07-18 17:10:25 +09:00
parent 2658dde159
commit 2579323ddf
92 changed files with 46187 additions and 7 deletions
--- a/plugin/editor/smarteditor2/photo_uploader/popup/callback.html
+++ b/plugin/editor/smarteditor2/photo_uploader/popup/callback.html
@ -0,0 +1,31 @@
+<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> 
+<html lang="ko">
+<head>
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+    <title>FileUploader Callback</title>
+</head>
+<body>
+    <script type="text/javascript">
+    	// alert("callback");
+		// document.domain 설정
+		try { document.domain = "http://*.naver.com"; } catch(e) {}
+		
+        // execute callback script
+        var sUrl = document.location.search.substr(1);
+		if (sUrl != "blank") {
+	        var oParameter = {}; // query array
+
+	        sUrl.replace(/([^=]+)=([^&]*)(&|$)/g, function(){
+	            oParameter[arguments[1]] = arguments[2];
+	            return "";
+	        });
+	        
+	        if ((oParameter.errstr || '').length) { // on error
+	            (parent.jindo.FileUploader._oCallback[oParameter.callback_func+'_error'])(oParameter);
+	        } else {
+		        (parent.jindo.FileUploader._oCallback[oParameter.callback_func+'_success'])(oParameter);
+		   }
+		}
+    </script>
+</body>
+</html>