[KVE-2026-0029]Stored XSS 취약점 수정

2026-01-27 05:50:34 +00:00
parent b94771de92
commit d775d2255f
1 changed files with 3 additions and 1 deletions
--- a/bbs/write.php
+++ b/bbs/write.php
@ -346,8 +346,10 @@ if ($w == '') {
    }

    for($i=0;$i<$file_count;$i++){
-        if(! isset($file[$i])) {
+        if (!isset($file[$i])) {
            $file[$i] = array('file'=>null, 'source'=>null, 'size'=>null, 'bf_content' => null);
+        } else {
+            $file[$i]['bf_content'] = isset($file[$i]['bf_content']) ? htmlspecialchars($file[$i]['bf_content'], ENT_QUOTES, 'UTF-8', false) : null;
        }
    }