XSS 취약점 수정

2015-07-09 13:46:17 +09:00
parent 99137d8fef
commit 45244de78e
3 changed files with 4 additions and 8 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -2367,12 +2367,8 @@ function hyphen_hp_number($hp)
 function login_url($url='')
 {
    if (!$url) $url = G5_URL;
-    /*
-    $p = parse_url($url);
-    echo urlencode($_SERVER['REQUEST_URI']);
-    return $url.urldecode(preg_replace("/^".urlencode($p['path'])."/", "", urlencode($_SERVER['REQUEST_URI'])));
-    */
-    return $url;
+
+    return urlencode(clean_xss_tags($url));
 }