From f631b3dca782588a6893d1ce3fe969c231178dd3 Mon Sep 17 00:00:00 2001
From: kagla <kagla@naver.com>
Date: Thu, 1 Jul 2021 10:59:16 +0900
Subject: [PATCH] =?UTF-8?q?KISA=20=EC=B7=A8=EC=95=BD=EC=A0=90=20=EA=B6=8C?=
 =?UTF-8?q?=EA=B3=A0=EC=82=AC=ED=95=AD=20Stored=20XSS=20(210624)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 bbs/qawrite.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/bbs/qawrite.php b/bbs/qawrite.php
index fb041e0ad..0f279f3d4 100644
--- a/bbs/qawrite.php
+++ b/bbs/qawrite.php
@@ -79,7 +79,8 @@ if(is_file($skin_file)) {
         else
             $content = "\n\n\n\n====== 이전 답변내용 =======\n";
 
-        $content .= get_text($write['qa_content'], 0);
+        // KISA 취약점 권고사항 Stored XSS (210624)
+        $content .= get_text(html_purifier($write['qa_content']), 0);
     } else {
         //$content = get_text($write['qa_content'], 0);