diff --git a/src/main/java/kcc/ve/aplct/adultVisitEdu/eduAplct/web/EduAplctAdultController.java b/src/main/java/kcc/ve/aplct/adultVisitEdu/eduAplct/web/EduAplctAdultController.java index aecfd432..425f3bcf 100644 --- a/src/main/java/kcc/ve/aplct/adultVisitEdu/eduAplct/web/EduAplctAdultController.java +++ b/src/main/java/kcc/ve/aplct/adultVisitEdu/eduAplct/web/EduAplctAdultController.java @@ -235,7 +235,10 @@ public class EduAplctAdultController { //로그인 처리==================================== //로그인 정보 가져오기 - + + /*240820 XSS 취약점 조치*/ + vEEduAplctVO.setJobNm(unscript(vEEduAplctVO.getJobNm())); + String s_userCheckNInfo = checkLoginUtil.userCheckNInfo(model, request); if (!"".equals(s_userCheckNInfo)) { modelAndView.addObject("result", "loginFail"); @@ -558,4 +561,39 @@ public class EduAplctAdultController { return p_paginationInfo; } + + /** + * XSS 방지 처리. + * + * @param data + * @return + */ + protected String unscript(String data) { + if (data == null || data.trim().equals("")) { + return ""; + } + + String ret = data; + + ret = ret.replaceAll("<(S|s)(C|c)(R|r)(I|i)(P|p)(T|t)", "<script"); + ret = ret.replaceAll(" - <%--
- -
- - -
~ - -
- - -
-
--%> - diff --git a/src/main/webapp/WEB-INF/jsp/oprtn/cpyrgExprnClsrm/oprtnAplctAnncmMngUpdate.jsp b/src/main/webapp/WEB-INF/jsp/oprtn/cpyrgExprnClsrm/oprtnAplctAnncmMngUpdate.jsp index 26c5114e..272704c5 100644 --- a/src/main/webapp/WEB-INF/jsp/oprtn/cpyrgExprnClsrm/oprtnAplctAnncmMngUpdate.jsp +++ b/src/main/webapp/WEB-INF/jsp/oprtn/cpyrgExprnClsrm/oprtnAplctAnncmMngUpdate.jsp @@ -476,24 +476,6 @@ - <%--
- - - " class="startDate inp" title="검색시작일" id="startDate01" name="strtPnttm" onclick="return calendarOpen('startDate01-lry','',this)" value="${vEPrcsDetailVO.endPnttm}" data-datecontrol="true" readonly> -
- - -
~ - " class="endDate inp" title="검색시작일" id="endDate" name="endPnttm" onclick="return calendarOpen('endDate-lry','',this)" value="${vEPrcsDetailVO.endPnttm}" data-datecontrol="true" readonly> -
- - -
-
--%> diff --git a/src/main/webapp/WEB-INF/web.xml b/src/main/webapp/WEB-INF/web.xml index 9284d07b..1195ab09 100644 --- a/src/main/webapp/WEB-INF/web.xml +++ b/src/main/webapp/WEB-INF/web.xml @@ -131,10 +131,26 @@ java.lang.Throwable /common/error.jsp + + 400 + /common/error.jsp + + + 401 + /common/error.jsp + + + 403 + /common/error.jsp + 404 /common/error.jsp + + 405 + /common/error.jsp + 500 /common/error.jsp