fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-22 05:15:29 +09:00
Code Issues Projects Releases Packages Wiki Activity

request argument를 변조한 XSS 시도 방지 코드 추가

Browse source 
git-svn-id: http://xe-core.googlecode.com/svn/sandbox@4581 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
zero 2008-10-01 07:56:43 +00:00
parent 81ac933a7a
commit 96af126a82
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
classes/context/Context.class.php
View file

@ -162,7 +162,7 @@
if($this->get_vars) { if($this->get_vars) {
foreach($this->get_vars as $key => $val) { foreach($this->get_vars as $key => $val) {
if(!$val) continue; if(!$val) continue;
$url .= ($url?'&':'').$key.'='.$val; $url .= ($url?'&':'').$key.'='.urlencode($val);
} }
Context::set('current_url',sprintf('%s?%s', $this->getRequestUri(), $url)); Context::set('current_url',sprintf('%s?%s', $this->getRequestUri(), $url));
} else { } else {