XSS 취약점 해결

2013-08-22 16:14:29 +09:00
parent a0b352db23
commit b598c94537
2 changed files with 2 additions and 2 deletions
--- a/tail.php
+++ b/tail.php
@ -44,7 +44,7 @@ if(!G4_IS_MOBILE) {
            if($key == 'device')
                continue;

-            $href .= $sep.$key.'='.$val;
+            $href .= $sep.$key.'='.strip_tags($val);
            $sep = '&amp;';
            $seq++;
        }