fix #1583 is_keyword에 대한 취약점 문제 개선

This commit is contained in:
bnu 2015-07-09 03:51:05 +09:00
parent a69ebaeabc
commit 85e9be0c9a
4 changed files with 7 additions and 3 deletions

View file

@ -60,6 +60,10 @@ class HTMLDisplayHandler
$output = $oTemplate->compile($template_path, $tpl_file);
// SECISSUE https://github.com/xpressengine/xe-core/issues/1583
$oSecurity = new Security();
$oSecurity->encodeHTML('is_keyword');
// add .x div for adminitration pages
if(Context::getResponseMethod() == 'HTML')
{