XSS 취약점 수정

2019-06-12 15:17:43 +09:00
parent 9e14e803e5
commit e6a3270936
6 changed files with 16 additions and 16 deletions
--- a/adm/newwinform.php
+++ b/adm/newwinform.php
@ -114,7 +114,7 @@ include_once (G5_ADMIN_PATH.'/admin.head.php');
    </tr>
    <tr>
        <th scope="row"><label for="nw_content">내용</label></th>
-        <td><?php echo editor_html('nw_content', get_text($nw['nw_content'], 0)); ?></td>
+        <td><?php echo editor_html('nw_content', get_text(html_purifier($nw['nw_content']), 0)); ?></td>
    </tr>
    </tbody>
    </table>