그누보드 XSS 취약점(KVE-2019-1235,1236,1238)

2019-08-29 12:23:29 +09:00
parent 120d42c431
commit c2922aaa13
2 changed files with 2 additions and 2 deletions
--- a/bbs/qawrite.php
+++ b/bbs/qawrite.php
@ -67,7 +67,7 @@ if(is_file($skin_file)) {

    $content = '';
    if ($w == '') {
-        $content = $qaconfig['qa_insert_content'];
+        $content = html_purifier($qaconfig['qa_insert_content']);
    } else if($w == 'r') {
        if($is_dhtml_editor)
            $content = '<div><br><br><br>====== 이전 답변내용 =======<br></div>';