KVE-2018-1316 그누보드,영카트 취약점 수정

2018-11-16 17:54:57 +09:00
parent ccba200fbd
commit bc5779fafb
3 changed files with 12 additions and 5 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -2885,6 +2885,8 @@ function clean_xss_tags($str)
 {
    $str = preg_replace('#</*(?:applet|b(?:ase|gsound|link)|embed|frame(?:set)?|i(?:frame|layer)|l(?:ayer|ink)|meta|object|s(?:cript|tyle)|title|xml)[^>]*+>#i', '', $str);

+    $str = str_replace(array('<script>','</script>','<noscript>','</noscript>'), '', $str);
+
    return $str;
 }