From 30a24811455ab51f91d7be331747741f80d877c5 Mon Sep 17 00:00:00 2001
From: kagla <kagla@naver.com>
Date: Fri, 11 Mar 2022 11:08:13 +0900
Subject: [PATCH] =?UTF-8?q?Cross-site=20Scripting=20(XSS)=20=ED=95=B4?=
 =?UTF-8?q?=EA=B2=B0=20(SeungHyunKim=EB=8B=98,220311)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 mobile/shop/lg/mispwapurl.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mobile/shop/lg/mispwapurl.php b/mobile/shop/lg/mispwapurl.php
index 83fc1de52..79e1f1360 100644
--- a/mobile/shop/lg/mispwapurl.php
+++ b/mobile/shop/lg/mispwapurl.php
@@ -2,7 +2,7 @@
 // 해당 페이지는 사용자가 ISP{국민/BC) 카드 결제를 성공하였을 때, 사용자에게 보여지는 페이지입니다.
 include_once('./_common.php');
 
-$LGD_OID    = $_GET['LGD_OID'];
+$LGD_OID    = clean_xss_tags($_GET['LGD_OID']);
 
 echo "LGD_OID = ".$LGD_OID;