fix #2094 검색과 관련된 입력 값에 대한 encode 적용

xpressengine · May 23, 2017 · 512b7f5 · 512b7f5
1 parent d1fc5a0
commit 512b7f5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/classes/display/HTMLDisplayHandler.php b/classes/display/HTMLDisplayHandler.php
@@ -62,7 +62,7 @@ function toDoc(&$oModule)
 
 		// SECISSUE https://github.com/xpressengine/xe-core/issues/1583
 		$oSecurity = new Security();
-		$oSecurity->encodeHTML('is_keyword');
+		$oSecurity->encodeHTML('is_keyword', 'search_keyword', 'search_target', 'order_target', 'order_type');
 
 		// add .x div for adminitration pages
 		if(Context::getResponseMethod() == 'HTML')