thisgun 96df43480b
게시판·1:1문의·쇼핑몰분류 상단/하단 파일 경로 처리 보강 ...
콘텐츠와 동일하게, 게시판(bo_include)·1:1문의(qa_include)·쇼핑몰 분류
(ca_include)의 상단/하단 파일 경로도 저장 전에 먼저 정규화한 뒤 확장자와
위치를 검증하도록 순서를 조정한다. 정규화 과정에서 확장자가 사라져 검증을
우회하던 경로를 차단하고, data 디렉터리로 귀결되는 경로를 거부한다.
실행 직전 board_head/board_tail, qahead/qatail, shop 목록·상품 페이지에서도
승인 확장자와 data 디렉터리 여부를 다시 확인하는 is_content_include_allowed()
를 적용한다. 이미 저장된 경로도 실행 시 재확인된다.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com >
(cherry picked from commit 0c6bca704725ebea2a584d4c06366282e9bc36d6)
2026-08-24 07:44:22 +00:00
2018-03-30 18:12:51 +09:00
2026-07-24 06:25:17 +00:00
2026-08-24 07:44:22 +00:00
2026-05-29 06:25:12 +00:00
2026-05-29 06:25:12 +00:00
2026-05-29 06:25:12 +00:00
2025-11-14 07:30:47 +00:00
2026-08-24 07:44:22 +00:00
2022-01-19 06:16:31 +00:00
2026-05-29 06:30:29 +00:00
2022-03-22 12:52:36 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-08-24 07:44:22 +00:00
2022-06-13 14:28:35 +09:00
2026-08-24 07:44:22 +00:00
2023-01-20 11:17:20 +09:00
2021-01-04 15:39:15 +09:00
2026-03-25 09:18:48 +00:00
2023-04-17 12:16:12 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:02:26 +00:00
2019-12-02 10:29:31 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2024-02-14 19:09:20 +09:00
2021-02-26 17:11:57 +09:00
2026-08-24 07:44:22 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-08-24 07:44:22 +00:00
2026-05-26 06:32:28 +00:00
2026-04-16 03:46:02 +00:00
2021-01-04 15:39:15 +09:00
2025-09-19 17:53:50 +09:00
2025-09-19 17:53:50 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-08-24 07:44:22 +00:00
2026-05-26 06:32:28 +00:00
2021-01-04 15:39:15 +09:00
2026-08-24 07:44:22 +00:00
2023-07-04 18:37:23 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-04-16 02:02:26 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-07-23 08:03:16 +00:00
2026-08-24 07:44:22 +00:00
2026-04-16 02:15:29 +00:00
2026-04-16 02:15:29 +00:00
2026-08-24 07:44:22 +00:00
2026-08-24 07:44:22 +00:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2024-04-03 10:42:04 +09:00
2026-07-23 08:03:16 +00:00
2026-08-24 07:44:22 +00:00
2026-08-24 07:44:22 +00:00
2026-04-16 02:26:59 +00:00
2025-09-19 17:53:50 +09:00
2026-07-23 08:03:16 +00:00
2021-01-04 15:39:15 +09:00
2025-09-19 17:53:50 +09:00
2021-01-04 15:39:15 +09:00
2025-09-19 17:53:50 +09:00
2021-01-04 15:39:15 +09:00
2025-11-14 07:30:47 +00:00
2026-08-24 07:44:22 +00:00
2026-08-24 07:44:22 +00:00
2026-06-23 00:36:35 +00:00
2025-09-16 16:34:15 +09:00
2021-01-04 15:39:15 +09:00
2021-01-04 15:39:15 +09:00
2026-08-24 07:44:21 +00:00
2021-01-04 15:39:15 +09:00
2021-03-16 11:01:52 +09:00
thisgun
96df43480b