somang4819/itsm_ysm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

웹취약점처리, 엔터키 소스 삭제

Browse Source
This commit is contained in:
JSYOO 2021-12-02 11:52:19 +09:00
parent 44f5b3a228
commit 63f7308014
3 changed files with 12 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/main/java/nlib/sch/web/NlibSearchController.java
View File

@ -380,6 +380,7 @@ public class NlibSearchController extends NlibCommonController {
) throws EgovBizException { ) throws EgovBizException {
String returnUrl = ""; String returnUrl = "";
DataMap paramMap = DataMap.getParamMap(req); DataMap paramMap = DataMap.getParamMap(req);
BufferedReader br = null;
try { try {
String originUrl = URLEncoder.encode(paramMap.getString("url"), "UTF-8"); String originUrl = URLEncoder.encode(paramMap.getString("url"), "UTF-8");
URL url = new URL( NlibProperty.getProperty("shorturl.api") + "&action=shorturl&format=xml&title=nculture&url=" + originUrl); URL url = new URL( NlibProperty.getProperty("shorturl.api") + "&action=shorturl&format=xml&title=nculture&url=" + originUrl);
@ -387,7 +388,6 @@ public class NlibSearchController extends NlibCommonController {
con.setRequestMethod("GET"); con.setRequestMethod("GET");
//con.setRequestProperty("Authorization", header); //con.setRequestProperty("Authorization", header);
int responseCode = con.getResponseCode(); int responseCode = con.getResponseCode();
BufferedReader br;
if(responseCode==200) { // 정상 호출 if(responseCode==200) { // 정상 호출
br = new BufferedReader(new InputStreamReader(con.getInputStream())); br = new BufferedReader(new InputStreamReader(con.getInputStream()));
} else { // 에러 발생 } else { // 에러 발생
@ -399,7 +399,6 @@ public class NlibSearchController extends NlibCommonController {
while ((inputLine = br.readLine()) != null) { while ((inputLine = br.readLine()) != null) {
response.append(inputLine); response.append(inputLine);
} }
br.close();
String str = response.toString(); String str = response.toString();
Pattern pattern = Pattern.compile("<shorturl>(.+?)</shorturl>"); Pattern pattern = Pattern.compile("<shorturl>(.+?)</shorturl>");
@ -413,6 +412,17 @@ public class NlibSearchController extends NlibCommonController {
} catch (IOException e) { } catch (IOException e) {
log.error("shorturl-data.do 단축url > Exception 발생 : " + e.toString()); log.error("shorturl-data.do 단축url > Exception 발생 : " + e.toString());
} }
finally
{
try
{
if(br != null)br.close();
}
catch (IOException e)
{
log.error("shorturl-data.do 단축url > Exception 발생 : " + e.toString());
}
}
return returnUrl; return returnUrl;
} }
/** /**

6
src/main/webapp/WEB-INF/jsp/nlib/member/insertMemberInfoForm.jsp
View File

@ -419,12 +419,6 @@ function certMobileCheck(){
}) })
} }
document.addEventListener('keydown', function(event) {
if (event.keyCode === 13) {
event.preventDefault();
}
}, true);
function checkBirthday() { function checkBirthday() {
var birthday; var birthday;
var yy = $("#birth_yy option:selected").val(); var yy = $("#birth_yy option:selected").val();

6
src/main/webapp/WEB-INF/jsp/nlib/userInfo/putMyInfo.jsp
View File

@ -477,12 +477,6 @@ function fn_cancel(){
location.href="/userInfo/getMyHome.do"; location.href="/userInfo/getMyHome.do";
} }
document.addEventListener('keydown', function(event) {
if (event.keyCode === 13) {
event.preventDefault();
}
}, true);
function checkBirthday() { function checkBirthday() {
var birthday; var birthday;
var yy = $("#birth_yy option:selected").val(); var yy = $("#birth_yy option:selected").val();