From a8b594b97512026b1ac1836421cc9caece607ca8 Mon Sep 17 00:00:00 2001
From: xedev <yjsoft@yjsoft.pe.kr>
Date: Mon, 13 Jul 2015 10:22:19 +0900
Subject: [PATCH] SECISSUE
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

getExtraValue, getExtraEidValue 함수 사용시 값 필터링이 되지 않는 문제를 수정합니다.
---
 classes/extravar/Extravar.class.php | 10 ++++++++++
 modules/document/document.item.php  |  4 ++--
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/classes/extravar/Extravar.class.php b/classes/extravar/Extravar.class.php
index 7438db2b9..821a7c62b 100644
--- a/classes/extravar/Extravar.class.php
+++ b/classes/extravar/Extravar.class.php
@@ -289,6 +289,16 @@ class ExtraItem
 		}
 	}
 
+	/**
+	 * Returns a value for HTML
+	 *
+	 * @return string Returns a value expressed in HTML.
+	 */
+	function getValue()
+	{	
+		return $this->_getTypeValue($this->type, $this->value);
+	}
+
 	/**
 	 * Returns a value for HTML
 	 *
diff --git a/modules/document/document.item.php b/modules/document/document.item.php
index 0604cf69c..8c240b9ee 100644
--- a/modules/document/document.item.php
+++ b/modules/document/document.item.php
@@ -651,7 +651,7 @@ class documentItem extends Object
 	function getExtraValue($idx)
 	{
 		$extra_vars = $this->getExtraVars();
-		return $extra_vars[$idx]->value;
+		return $extra_vars[$idx]->getValue();
 	}
 
 	function getExtraValueHTML($idx)
@@ -679,7 +679,7 @@ class documentItem extends Object
 				$extra_eid[$key->eid] = $key;
 			}
 		}
-		return $extra_eid[$eid]->value;
+		return $extra_eid[$eid]->getValue();
 	}
 
 	function getExtraEidValueHTML($eid)