1:1문의 XSS 취약점 수정

2014-06-11 15:30:55 +09:00
parent c8a69b054e
commit 6518b22854
3 changed files with 22 additions and 1 deletions
--- a/bbs/qaview.php
+++ b/bbs/qaview.php
@ -30,7 +30,7 @@ if(is_file($skin_file)) {
    $view['content'] = conv_content($view['qa_content'], $view['qa_html']);
    $view['name'] = get_text($view['qa_name']);
    $view['datetime'] = $view['qa_datetime'];
-    $view['email'] = $view['qa_email'];
+    $view['email'] = get_text(get_email_address($view['qa_email']));
    $view['hp'] = $view['qa_hp'];

    if (trim($stx))