KISA 취약점 권고사항 Stored XSS (210624)

2021-07-01 10:59:16 +09:00
parent e3a7dfd319
commit f631b3dca7
1 changed files with 2 additions and 1 deletions
--- a/bbs/qawrite.php
+++ b/bbs/qawrite.php
@ -79,7 +79,8 @@ if(is_file($skin_file)) {
        else
            $content = "\n\n\n\n====== 이전 답변내용 =======\n";

-        $content .= get_text($write['qa_content'], 0);
+        // KISA 취약점 권고사항 Stored XSS (210624)
+        $content .= get_text(html_purifier($write['qa_content']), 0);
    } else {
        //$content = get_text($write['qa_content'], 0);