fix:分页url存在xss漏洞攻击

分页url存在xss漏洞攻击
jianyan74 · Nov 13, 2019 · 5817a7a · 5817a7a
1 parent 8b761b6
commit 5817a7a
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/common/helpers/DebrisHelper.php b/common/helpers/DebrisHelper.php
@@ -166,7 +166,8 @@ public static function getPageSkipUrl()
             $fullUrl .= implode('&', $getQueryParamArr);
             $pageConnector = '&';
         }
-
+        $fullUrl = Html::encode($fullUrl);
+        $pageConnector = Html::encode($pageConnector);
         return [$fullUrl, $pageConnector];
     }
 
@@ -259,4 +260,4 @@ public static function getDistance($lat1, $lng1, $lat2, $lng2)
 
         return round($calculatedDistance);
     }
-}
+}