XSS 취약점 수정

2018-10-30 09:42:48 +09:00
parent c82c937fbb
commit a45241f4bc
9 changed files with 31 additions and 12 deletions
--- a/adm/menu_list_update.php
+++ b/adm/menu_list_update.php
@ -23,8 +23,8 @@ for ($i=0; $i<$count; $i++)

    $code    = $_POST['code'][$i];
    $me_name = $_POST['me_name'][$i];
-    $me_link = $_POST['me_link'][$i];
-
+    $me_link = preg_match('/^javascript/', $_POST['me_link'][$i]) ? G5_URL : strip_tags($_POST['me_link'][$i]);
+    
    if(!$code || !$me_name || !$me_link)
        continue;