Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

XEVE-16-008 #2005

Closed
ghost opened this issue Jan 5, 2017 · 0 comments
Closed

XEVE-16-008 #2005

ghost opened this issue Jan 5, 2017 · 0 comments
Labels
priotity/critical type/SECURITY
Milestone
1.8.28

Comments

@ghost
Copy link

ghost commented Jan 5, 2017

No description provided.

@ghost ghost added this to the 1.8.28 milestone Jan 5, 2017
@ghost ghost self-assigned this Jan 5, 2017
@ghost ghost closed this as completed in 1af9807 Jan 12, 2017
YJSoft added a commit to daolcms/daolcms that referenced this issue Jan 12, 2017
@YJSoft
XSS 방지 및 XSS를 통해 특정 명령을 실행할 수 있는 보안취약점 해결
b4de150 
see xpressengine/xe-core#2005
ghost pushed a commit that referenced this issue Jan 12, 2017
#2005 1af9807 변경의 영향으로 관리페이지의 메뉴가 잘못 표시되는 문제 고침
b8a6ca0
ghost pushed a commit that referenced this issue Apr 13, 2017
fix #2015 #2005 이슈에서 보안 문제로 메뉴명에서 모든 태그를 제거했던 동작을 변경
bc971e2 
- 안전하지 않은 태그만 필터링하도록 변경
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
priotity/critical type/SECURITY
Projects
None yet
Milestone
1.8.28
Development

No branches or pull requests
0 participants