fix:分页url存在xss漏洞攻击

Zhibin1995 · jianyan74 · commit 5817a7a861b8 · 2019-11-13T08:26:18.000+08:00
分页url存在xss漏洞攻击
diff --git a/common/helpers/DebrisHelper.php b/common/helpers/DebrisHelper.php
@@ -166,7 +166,8 @@ public static function getPageSkipUrl()
             $fullUrl .= implode('&', $getQueryParamArr);
             $pageConnector = '&';
         }
-
+        $fullUrl = Html::encode($fullUrl);
+        $pageConnector = Html::encode($pageConnector);
         return [$fullUrl, $pageConnector];
     }
 
@@ -259,4 +260,4 @@ public static function getDistance($lat1, $lng1, $lat2, $lng2)
 
         return round($calculatedDistance);
     }
-}
+}

Original file line number	Diff line number	Diff line change
`@@ -166,7 +166,8 @@ public static function getPageSkipUrl()`
`166`	`166`	`$fullUrl .= implode('&', $getQueryParamArr);`
`167`	`167`	`$pageConnector = '&';`
`168`	`168`	`}`
`169`		`-`
	`169`	`+ $fullUrl = Html::encode($fullUrl);`
	`170`	`+ $pageConnector = Html::encode($pageConnector);`
`170`	`171`	`return [$fullUrl, $pageConnector];`
`171`	`172`	`}`
`172`	`173`
`@@ -259,4 +260,4 @@ public static function getDistance($lat1, $lng1, $lat2, $lng2)`
`259`	`260`
`260`	`261`	`return round($calculatedDistance);`
`261`	`262`	`}`
`262`		`-}`
	`263`	`+}`