[KVE-1574,1575,1576,1577]영카트 XSS 취약점 수정

2020-02-13 13:48:58 +09:00
parent 7b220eaeb9
commit a47162dffa
9 changed files with 27 additions and 22 deletions
--- a/adm/shop_admin/configformupdate.php
+++ b/adm/shop_admin/configformupdate.php
@ -232,7 +232,7 @@ $check_sanitize_keys = array(
 );

 foreach( $check_sanitize_keys as $key ){
-    $$key = isset($_POST[$key]) ? strip_tags($_POST[$key]) : '';
+    $$key = isset($_POST[$key]) ? strip_tags(clean_xss_attributes($_POST[$key])) : '';
 }

 //