fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-26 05:42:13 +09:00
Code Issues Projects Releases Packages Wiki Activity

javascript 이벤트 제거 필터링 강화

Browse source 
git-svn-id: http://xe-core.googlecode.com/svn/sandbox@4716 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
zero 2008-10-28 21:37:08 +00:00
parent d5f0ec8521
commit 3703b7c6e5
1 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

8
config/func.inc.php
View file

@ -459,16 +459,16 @@
**/
function removeHackTag($content) {
// iframe 제거
$content = preg_replace("!<iframe(.*?)<\/iframe>!is", '', $content);
$content = preg_replace("!<iframe(.*?)<\/iframe>!is", '&lt;iframe$1&lt;/iframe&gt;', $content);
// script code 제거
$content = preg_replace("!<script(.*?)<\/script>!is", '', $content);
$content = preg_replace("!<script(.*?)<\/script>!is", '&lt;script$1&lt;/script&gt;', $content);
// meta 태그 제거
$content = preg_replace("!<meta(.*?)>!is", '', $content);
$content = preg_replace("!<meta(.*?)>!is", '&lt;meta$1&gt;', $content);
// style 태그 제거
$content = preg_replace("!<style(.*?)<\/style>!is", '', $content);
$content = preg_replace("!<style(.*?)<\/style>!is", '&lt;style$1&lt;style&gt;', $content);
// XSS 사용을 위한 이벤트 제거
$content = preg_replace_callback("!<([a-z]+)(.*?)>!is", removeJSEvent, $content);