From d87802eb946e378a9810385acf27f3a8859cc282 Mon Sep 17 00:00:00 2001 From: kagla Date: Wed, 8 Dec 2021 10:38:18 +0900 Subject: [PATCH] =?UTF-8?q?(KVE-2021-1846)=20url=20=EA=B0=92=EC=97=90=20Li?= =?UTF-8?q?ne=20feed=EC=9D=B8=20"%0A"=20=EA=B0=92=EC=9D=84=20=EC=82=BD?= =?UTF-8?q?=EC=9E=85=ED=95=98=EC=97=AC=20=EC=A0=84=EC=86=A1=ED=95=98?= =?UTF-8?q?=EB=8A=94=20=EA=B2=BD=EC=9A=B0=20check=5Furl=5Fhost=20=ED=95=A8?= =?UTF-8?q?=EC=88=98=20=EC=9A=B0=ED=9A=8C=20=EC=B7=A8=EC=95=BD=EC=A0=90=20?= =?UTF-8?q?=EC=88=98=EC=A0=95=20(Pocas=EB=8B=98)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- lib/common.lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/common.lib.php b/lib/common.lib.php index b6bb9837cb..8608ddd29c 100644 --- a/lib/common.lib.php +++ b/lib/common.lib.php @@ -3299,7 +3299,7 @@ function check_url_host($url, $msg='', $return_url=G5_URL, $is_redirect=false) if(!$msg) $msg = 'url에 타 도메인을 지정할 수 없습니다.'; - $p = @parse_url($url); + $p = @parse_url(trim($url)); $host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']); $is_host_check = false;