상품 검색 페이지 xss 취약점 수정

2023-06-16 17:20:18 +09:00
parent f4821aa49a
commit 2a8f5f6035
3 changed files with 10 additions and 8 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -23,6 +23,7 @@ function get_paging($write_pages, $cur_page, $total_page, $url, $add="")
    //$url = preg_replace('#&amp;page=[0-9]*(&amp;page=)$#', '$1', $url);
    $url = preg_replace('#(&amp;)?page=[0-9]*#', '', $url);
 	$url .= substr($url, -1) === '?' ? 'page=' : '&amp;page=';
+    $url = preg_replace('|[^\w\-~+_.?#=!&;,/:%@$\|*\'()\[\]\\x80-\\xff]|i', '', clean_xss_tags($url));

    $str = '';
    if ($cur_page > 1) {