fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-08 03:01:43 +09:00
Code Issues Projects Releases Packages Wiki Activity

RVE-2024-1 properly encode document title passed to js variable

Browse source
This commit is contained in:
Kijin Sung 2024-01-20 00:41:14 +09:00
parent 152fb4e753
commit 1854700e77
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
modules/board/skins/default/_read.html
View file

@ -67,7 +67,7 @@
<li class="delicious link"><a href="https://delicious.com/">Delicious</a></li>
</ul>
<script>
var sTitle = '{str_ireplace(array('<script', '</script'), array("<scr'+'ipt", "</scr'+'ipt"), addslashes($oDocument->getTitleText()))}';
var sTitle = {json_encode($oDocument->getTitleText())};
jQuery(function($){
$('.twitter>a').snspost({
type : 'twitter',

2
modules/board/skins/xedition/_read.html
View file

@ -64,7 +64,7 @@
</li>
</ul>
<script>
var sTitle = '{$oDocument->getTitleText()}';
var sTitle = {json_encode($oDocument->getTitleText())};
jQuery(function($){
$('.twitter').snspost({
type : 'twitter',