Reflected XSS 취약점(16-036) 수정

gnuboard · Feb 11, 2016 · 9a87050 · 9a87050
1 parent 008ae97
commit 9a87050
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/bbs/alert.php b/bbs/alert.php
@@ -33,6 +33,8 @@
 $url = clean_xss_tags($url);
 if (!$url) $url = clean_xss_tags($_SERVER['HTTP_REFERER']);
 
+$url = preg_replace("/[\<\>\'\"\\\'\\\"\(\)]/", "", $url);
+
 // url 체크
 check_url_host($url);