fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-01-08 03:01:43 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix #2005 XEVE-16-008 XSS 방지 및 XSS를 통해 특정 명령을 실행할 수 있는 보안취약점 해결

Browse source
This commit is contained in:
bnu 2017-01-06 17:21:01 +09:00 • committed by Kijin Sung
parent fe5feddc63
commit 884c91a606
8 changed files with 19 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

1
modules/file/file.admin.view.php
View file

@ -202,6 +202,7 @@ class fileAdminView extends file
$security = new Security();
$security->encodeHTML('file_list..');
$security->encodeHTML('module_list..');
$security->encodeHTML('search_target', 'search_keyword');
$this->setTemplatePath($this->module_path.'tpl');
$this->setTemplateFile('file_list');