From 2457055514cb57324e13f73391b9672c02742bd2 Mon Sep 17 00:00:00 2001
From: kagla <kagla@naver.com>
Date: Fri, 15 Apr 2022 10:00:13 +0900
Subject: [PATCH] =?UTF-8?q?$url=20=ED=8C=8C=EB=9D=BC=EB=AF=B8=ED=84=B0?=
 =?UTF-8?q?=EC=97=90=20HTML=20Entity=20Number=20=ED=98=95=EC=8B=9D?=
 =?UTF-8?q?=EC=9C=BC=EB=A1=9C=20=EA=B0=92=EC=9D=B4=20=EB=84=98=EC=96=B4?=
 =?UTF-8?q?=EC=98=A4=EB=8A=94=20=EA=B2=BD=EC=9A=B0=EC=9D=98=20XSS=20?=
 =?UTF-8?q?=EC=B7=A8=EC=95=BD=EC=A0=90=20=ED=95=B4=EA=B2=B0=20(woonge?=
 =?UTF-8?q?=EB=8B=98,220415)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/member_confirm.php | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/bbs/member_confirm.php b/bbs/member_confirm.php
index 4c2f104a1..c2c07af1c 100644
--- a/bbs/member_confirm.php
+++ b/bbs/member_confirm.php
@@ -4,15 +4,14 @@ include_once('./_common.php');
 if ($is_guest)
     alert('로그인 한 회원만 접근하실 수 있습니다.', G5_BBS_URL.'/login.php');
 
-/*
-if ($url)
-    $urlencode = urlencode($url);
-else
-    $urlencode = urlencode($_SERVER[REQUEST_URI]);
-*/
-
 $url = isset($_GET['url']) ? clean_xss_tags($_GET['url']) : '';
 
+while (1) {
+    $tmp = preg_replace('/&#[^;]+;/', '', $url);
+    if ($tmp == $url) break;
+    $url = $tmp;
+}
+
 //소셜 로그인 한 경우
 if( function_exists('social_member_comfirm_redirect') && (! $url || $url === 'register_form.php' || (function_exists('social_is_edit_page') && social_is_edit_page($url) ) ) ){    
     social_member_comfirm_redirect();