fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-27 14:22:54 +09:00
Code Issues Projects Releases Packages Wiki Activity

Merge pull request #164 from conory/pr/remove_src_act

Browse source 
태그에서 act 가 포함된 url이 무조건 제거되지않도록 변경
This commit is contained in:
CONORY 2016-01-26 20:30:56 +09:00
commit f1179c1273
1 changed files with 13 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

16
common/legacy.php
View file

@ -1123,8 +1123,11 @@ function removeSrcHack($match)
}
}
$filter_arrts = array('style', 'src', 'href');
//Remove ACT URL (CSRF)
$except_act = array('procFileDownload');
$block_act = array('dispMemberLogout', 'dispLayoutPreview');
$filter_arrts = array('style', 'src', 'href');
if($tag === 'object') array_push($filter_arrts, 'data');
if($tag === 'param') array_push($filter_arrts, 'value');
@ -1135,9 +1138,16 @@ function removeSrcHack($match)
$attr_value = rawurldecode($attrs[$attr]);
$attr_value = htmlspecialchars_decode($attr_value, ENT_COMPAT);
$attr_value = preg_replace('/\s+|[\t\n\r]+/', '', $attr_value);
if(preg_match('@(\?|&|;)(act=)@i', $attr_value))
preg_match('@(\?|&|;)act=(disp|proc)([^&]*)@i', $attr_value, $actmatch);
$url_action = $actmatch[2].$actmatch[3];
if(!empty($url_action) && !in_array($url_action, $except_act))
{
unset($attrs[$attr]);
if($actmatch[2] == 'proc' || in_array($url_action, $block_act))
{
unset($attrs[$attr]);
}
}
}