Q&A 제목 특수문자처리

src/main/java/egovframework/com/cmm/filter/HTMLTagFilterRequestWrapper.java

@@ -108,6 +108,8 @@ public class HTMLTagFilterRequestWrapper extends HttpServletRequestWrapper {
     }
     
 	private String getSafeParamData(String value) {
+		
+		/*
 		StringBuffer strBuff = new StringBuffer();
 
 		for (int i = 0; i < value.length(); i++) {
@@ -143,6 +145,7 @@ public class HTMLTagFilterRequestWrapper extends HttpServletRequestWrapper {
 		}
 		
 		value = strBuff.toString();
+		*/
 		
 		// SQL INJECTION 취약점 보완 
 		value = value.replaceAll("\\s+[o|O][r|R]\\s+", " o-r ");

src/main/java/nlib/bbs/service/ArticleVO.java

@@ -100,6 +100,9 @@ public class ArticleVO extends PagingVO {
 	public String getTitle() {
 		return title;
 	}
+	public String getUnescapeTitle() {
+		return StringEscapeUtils.unescapeHtml(title);
+	}
 	public void setTitle(String title) {
 		this.title = StringUtil.getSafeParamData(title);
 	}

src/main/webapp/WEB-INF/jsp/nlib/bbs/insertQnaForm.jsp

@@ -314,7 +314,7 @@ function fn_downloadFile(attachFileId, fileSn) {
                                             <li class="wt-title fl">
                                                 <div class="w-tit">제목</div>
                                                 <div class="w-form">
-                                                    <input type="text" name="title" id="title" title="제목" value="${searchArticle.title}" size="100" maxlength="200" class="grid-1" placeholder="제목을 입력하세요." required />
+                                                    <input type="text" name="title" id="title" title="제목" value="${searchArticle.unescapeTitle}" size="100" maxlength="200" class="grid-1" placeholder="제목을 입력하세요." required />
                                                 </div>
                                             </li>
                                             <li class="wt-secret fl check">

src/main/webapp/WEB-INF/jsp/nlib/bbs/listQnas.jsp

@@ -152,7 +152,7 @@
                  var li = $('<tr class="tableTrData" />');
                  li.append($('<td />').attr('class', 't-num').html(obj.rno));   
                  li.append($('<td />').attr('class', 't-tit').html("<a href=\"javascript:void(0)\" onclick=\"fn_viewDetail('" + obj.articleId + "','" + obj.secretYn + "','" + obj.myQnaYn + "')\">" +
-                         obj.title + 
+                         obj.unescapeTitle + 
                          (obj.secretYn == "Y" ? '<img src="/images/icon/icon-password.png" alt="자물쇠 아이콘">&nbsp;' : '') +
                          "</a>"));
                  li.append($('<td />').attr('class', 't-writer').html(obj.regNmSec));

src/main/webapp/WEB-INF/jsp/nlib/bbs/selectQnaArticle.jsp

@@ -115,7 +115,7 @@ function fn_downloadFile(attachFileId, fileSn) {
                                     <span class="type">
                                     <c:if test='${article.answerYn == "Y"}'><span>답변완료</span></c:if>
                                     </span>
-                                    ${article.title}
+                                    ${article.unescapeTitle}
                                     <span>
                                     <c:if test='${article.secretYn == "Y"}'>
                                     <img src="/images/icon/icon-secret.png" alt="자물쇠 아이콘">

src/main/webapp/WEB-INF/web.xml

@@ -19,7 +19,6 @@
 		<filter-name>encodingFilter</filter-name>
 		<url-pattern>*.do</url-pattern>
 	</filter-mapping>
-    
 	<filter>
 		<filter-name>HTMLTagFilter</filter-name>
 		<filter-class>egovframework.com.cmm.filter.HTMLTagFilter</filter-class>