그누보드 open redirect 취약점 수정

2024-07-03 12:50:12 +09:00
parent 14ffe72574
commit c6b58bb16b
3 changed files with 1 additions and 4 deletions
--- a/common.php
+++ b/common.php
@ -505,7 +505,7 @@ if (isset($_REQUEST['bo_table']) && ! is_array($_REQUEST['bo_table'])) {

 // URL ENCODING
 if (isset($_REQUEST['url'])) {
-    $url = strip_tags(trim($_REQUEST['url']));
+    $url = preg_replace('|[^a-z0-9-~+_.?#=!&;,/:%@$\|*\'()\[\]\\x80-\\xff]|i', '', trim($_REQUEST['url']));
    $urlencode = urlencode($url);
 } else {
    $url = '';