보안취약점 수정 #297

gnuboard · Dec 18, 2023 · 4f2f725 · 4f2f725
1 parent fae53d3
commit 4f2f725
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/common.lib.php b/lib/common.lib.php
@@ -655,7 +655,7 @@ function html_purifier($html)
     if ((function_exists('check_html_link_nofollow') && check_html_link_nofollow('html_purifier'))) {
         $config->set('HTML.Nofollow', true); // rel=nofollow 으로 스팸유입을 줄임
     }
-    $config->set('URI.SafeIframeRegexp', '%^(https?:)?//(' . $safeiframe . ')%');
+    $config->set('URI.SafeIframeRegexp', '%^(https?:)?//(' . preg_replace('/\\\?\./', '\.', $safeiframe) . ')%');
     $config->set('Attr.AllowedFrameTargets', array('_blank'));
     //유튜브, 비메오 전체화면 가능하게 하기
     $config->set('Filter.Custom', array(new HTMLPurifier_Filter_Iframevideo()));