Преглед изворни кода

취약점 처리 2차 수정

huiwon.seo пре 4 година
родитељ
комит
3cf5f71cd6

+ 1 - 1
src/main/webapp/WEB-INF/jsp/cooperation/list.jsp

@@ -81,7 +81,7 @@ var endDate   = "<c:out value='${endDate}'/>";
                                                             </select>
                                                         </div>
                                                         <div class="col-6">
-                                                            <input type="text" class="form-control" name="sData" value="${sData}" placeholder="">
+                                                            <input type="text" class="form-control" name="sData" value='<c:out value="${sData}"/>' placeholder="">
                                                         </div>
                                                     </div>
                                                 </td>

+ 3 - 3
src/main/webapp/WEB-INF/jsp/notice/content.jsp

@@ -59,8 +59,8 @@ function goListPage(){
                         <div class="col-12">
                             <div class="card">
                                 <form id="sendForm" action="./notice/content/delete" method="post">
-                                    <input type="hidden" name="postSeq" value="${content.postSeq}" >
-                                    <input type="hidden" name="fileName" value="${content.fileName}" >
+                                    <input type="hidden" name="postSeq" value='<c:out value="${content.postSeq}"/>'>
+                                    <input type="hidden" name="fileName" value='<c:out value="${content.fileName}"/>'>
                                     <div class="card-body">
                                         <table class="table mobile-table">
                                             <colgroup>
@@ -97,7 +97,7 @@ function goListPage(){
                                                 <tr>
                                                     <td colspan="6">
                                                         <span class="badge bg-primary">첨부파일</span>
-                                                        <a href="./content/file?postSeq=${content.postSeq}" class="text-dark" target="_blank"><c:out value="${content.fileOriginalName}" /></a>
+                                                        <a href='./content/file?postSeq=<c:out value="${content.postSeq}"/>' class="text-dark" target="_blank"><c:out value="${content.fileOriginalName}" /></a>
                                                     </td>
                                                 </tr>
                                             </c:if>

+ 4 - 4
src/main/webapp/WEB-INF/jsp/notice/edit.jsp

@@ -112,9 +112,9 @@ function removeFile() {
                         <div class="col-12">
                             <div class="card">
                                 <form id="sendForm" action="./edit/update" method="post" enctype="multipart/form-data">
-                                    <input type="hidden" name="postSeq" value="${item.postSeq}" >
-                                    <input type="hidden" name="fileName" value="${item.fileName}" >
-                                    <input type="hidden" name="fileOriginalName" value="${item.fileOriginalName}" >
+                                    <input type="hidden" name="postSeq" value='<c:out value="${item.postSeq}"/>' >
+                                    <input type="hidden" name="fileName" value='<c:out value="${item.fileName}"/>' >
+                                    <input type="hidden" name="fileOriginalName" value='<c:out value="${item.fileOriginalName}"/>' >
                                     <div class="card-body">
                                         <table class="table mobile-table">
                                             <colgroup>
@@ -124,7 +124,7 @@ function removeFile() {
                                             <tr>
                                                 <th><span class="fix">*</span>제목</th>
                                                 <td>
-                                                    <input type="text" name="title" class="form-control" value="${item.title}" placeholder="제목을 입력하세요" maxlength="80" required>
+                                                    <input type="text" name="title" class="form-control" value='<c:out value="${item.title}"/>' placeholder="제목을 입력하세요" maxlength="80" required>
                                                 </td>
                                             </tr>
                                             

+ 1 - 1
src/main/webapp/WEB-INF/jsp/notice/list.jsp

@@ -50,7 +50,7 @@
                                                             </select>
                                                         </div>
                                                         <div class="col-6">
-                                                            <input type="text" class="form-control" name="searchTxt" value="${searchTxt}" placeholder="검색어를 입력하세요.">
+                                                            <input type="text" class="form-control" name="searchTxt" value='<c:out value="${searchTxt}"/>' placeholder="검색어를 입력하세요.">
                                                         </div>
                                                     </div>
                                                 </td>

+ 1 - 1
src/main/webapp/WEB-INF/jsp/staffTotal/list.jsp

@@ -154,7 +154,7 @@ function getExcel(){
                                                 </td>
                                                 <th>생활치료센터명</th>
                                                 <td>
-                                                    <input type="text" class="form-control" name="centerName" value="${centerName}" placeholder="검색어를 입력하세요.">
+                                                    <input type="text" class="form-control" name="centerName" value='<c:out value="${centerName}"/>' placeholder="검색어를 입력하세요.">
                                                 </td>
                                             </tr>
                                             <tr>

+ 1 - 1
src/main/webapp/WEB-INF/jsp/staffTotal/report/list.jsp

@@ -153,7 +153,7 @@ function getExcel(){
                                                 </td>
                                                 <th>생활치료센터명</th>
                                                 <td>
-                                                    <input type="text" class="form-control" name="centerName" value="${centerName}" placeholder="검색어를 입력하세요.">
+                                                    <input type="text" class="form-control" name="centerName" value='<c:out value="${centerName}"/>' placeholder="검색어를 입력하세요.">
                                                 </td>
                                             </tr>
                                             <tr>

+ 1 - 1
src/main/webapp/WEB-INF/jsp/statistics/list.jsp

@@ -130,7 +130,7 @@ function getExcel(){
                                                 <td>
                                                     <div class="form-row">
                                                         <div class="col-12">
-                                                            <input type="text" class="form-control" name="q" value="${q}" placeholder="">
+                                                            <input type="text" class="form-control" name="q" value='<c:out value="${q}"/>' placeholder="">
                                                         </div>
                                                     </div>
                                                 </td>