KVE-2019-0828 그누보드 XSS 취약점 수정

2019-05-27 09:39:13 +09:00
parent 18d4a60e03
commit 764cb34957
3 changed files with 5 additions and 0 deletions
--- a/bbs/content.php
+++ b/bbs/content.php
@ -26,6 +26,8 @@ if ($co['co_include_head'] && is_include_path_check($co['co_include_head']))
 else
    include_once('./_head.php');

+// KVE-2019-0828 취약점 내용
+$co['co_tag_filter_use'] = 1;
 $str = conv_content($co['co_content'], $co['co_html'], $co['co_tag_filter_use']);

 // $src 를 $dst 로 변환