KVE-2021-1116 그누보드 XSS 취약점 수정

2022-07-26 13:38:20 +09:00
parent a6e302ff84
commit 71f58f3108
4 changed files with 13 additions and 12 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -3965,7 +3965,7 @@ function get_random_token_string($length=6)
 }

 function filter_input_include_path($path){
-    return str_replace('//', '/', $path);
+    return str_replace('//', '/', strip_tags($path));
 }

 function option_array_checked($option, $arr=array()){