修复XSS漏洞

helloxz · Jan 7, 2019 · a8679fe · a8679fe
1 parent c9185f8
commit a8679fe
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/index.php b/index.php
@@ -12,6 +12,7 @@
 
 	//获取目录
 	$dir = $_GET['dir'];
+	$dir = strip_tags($dir);
 	$dir = str_replace("\\","/",$dir);
 	//获取markdown文件地址