From 47d9bc74e5f5f108ba89099cec3a546313cc5a34 Mon Sep 17 00:00:00 2001 From: itn Date: Mon, 21 Aug 2023 12:05:22 +0900 Subject: [PATCH] =?UTF-8?q?=ED=9A=8C=EC=9B=90=EA=B0=80=EC=9E=85=20mbldn?= =?UTF-8?q?=EA=B0=92=20xss=20=ED=95=84=ED=84=B0=20=EC=A0=9C=EC=99=B8?= =?UTF-8?q?=EC=B2=98=EB=A6=AC?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/main/java/itn/com/cmm/interceptor/InterceptorHandler.java | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/main/java/itn/com/cmm/interceptor/InterceptorHandler.java b/src/main/java/itn/com/cmm/interceptor/InterceptorHandler.java index 6553d2c0..a05eb3d1 100644 --- a/src/main/java/itn/com/cmm/interceptor/InterceptorHandler.java +++ b/src/main/java/itn/com/cmm/interceptor/InterceptorHandler.java @@ -52,7 +52,8 @@ public class InterceptorHandler extends HandlerInterceptorAdapter{ && !name.toLowerCase().contains("nttcn") && !name.toLowerCase().contains("ci") && !name.toLowerCase().contains("certdi") - && !name.toLowerCase().contains("di") + && !name.toLowerCase().contains("di") + && !name.toLowerCase().contains("mbldn") ) { //파라미터 중에 URL 주소를 넘겨주는 부분이 있어서 해당 부분에것 select~, update~, delete~ 로 시작하는 주소경로가 있어서 제외처리를 하였음 String[] values = request.getParameterValues(name);