fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-29 15:22:15 +09:00
Code Issues Projects Releases Packages Wiki Activity

Fix #2005 XEVE-16-008 XSS 방지 및 XSS를 통해 특정 명령을 실행할 수 있는 보안취약점 해결

Browse source
This commit is contained in:
bnu 2017-01-06 17:21:01 +09:00 • committed by Kijin Sung
parent fe5feddc63
commit 884c91a606
8 changed files with 19 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
modules/point/point.admin.view.php
View file

@ -114,9 +114,10 @@ class pointAdminView extends point
$this->group_list = $oMemberModel->getGroups();
Context::set('group_list', $this->group_list);
//Security
$security = new Security();
$security = new Security();
$security->encodeHTML('group_list..title','group_list..description');
$security->encodeHTML('member_list..');
$security->encodeHTML('search_target', 'search_keyword');
// Set the template
$this->setTemplateFile('member_list');