Fix exposure of unnecessary information via board API

This commit is contained in:
Kijin Sung 2017-04-13 23:18:49 +09:00
parent bff80770f1
commit d343422541
2 changed files with 25 additions and 8 deletions

View file

@ -416,6 +416,7 @@ class boardView extends board
$oDocumentModel = getModel('document');
$document_srl = Context::get('document_srl');
$oDocument = $oDocumentModel->getDocument($document_srl);
Context::set('oDocument', $oDocument);
Context::set('file_list',$oDocument->getUploadedFiles());
$oSecurity = new Security();