/kboard/helper/Security.helper.php

kboard_xssfilter() 함수가 있습니다.

이 함수 내용을 아래 코드로 교체해서 테스트 해주세요.

그래도 안되시면 KBoard->대시보드 페이지에서 "XSS공격 차단 비활성화" 해보시기 비랍니다.

글 작성 후 다시 활성화 해주세요.

function kboard_xssfilter($data){
    global $kboard_xssfilter_active;
    if(is_array($data)) return array_map('kboard_xssfilter', $data);
    if($kboard_xssfilter_active){
        if(!isset($GLOBALS['KBOARD']) || !isset($GLOBALS['KBOARD']['HTMLPurifier']) && !$GLOBALS['KBOARD']['HTMLPurifier'] || !isset($GLOBALS['KBOARD']['HTMLPurifier_Config']) || !$GLOBALS['KBOARD']['HTMLPurifier_Config']){
            $HTMLPurifier_Config = HTMLPurifier_Config::createDefault();
            $HTMLPurifier_Config->set('URI.AllowedSchemes', array('http'=>true, 'https'=>true, 'mailto'=>true));
            $HTMLPurifier_Config->set('URI.SafeIframeRegexp', '(.*)');
            $HTMLPurifier_Config->set('HTML.SafeIframe', true);
            $HTMLPurifier_Config->set('HTML.SafeObject', true);
            $HTMLPurifier_Config->set('HTML.SafeEmbed', true);
            $HTMLPurifier_Config->set('HTML.TidyLevel', 'light');
            $HTMLPurifier_Config->set('HTML.FlashAllowFullScreen', true);
            $HTMLPurifier_Config->set('HTML.AllowedElements','img,div,a,strong,font,span,em,br,p,u,i,b,sup,sub,small,table,thead,tbody,tfoot,tr,td,th,caption,pre,code,ul,li,ol,big,code,blockquote,center,hr,h1,h2,h3,h4,h5,h6,iframe,map,area');
            $HTMLPurifier_Config->set('HTML.AllowedAttributes', 'a.href,a.target,img.src,img.usemap,iframe.src,iframe.frameborder,area.coords,area.shape,area.href,area.target,*.id,*.alt,*.style,*.class,*.title,*.width,*.height,*.border,*.colspan,*.rowspan,*.name');
            $HTMLPurifier_Config->set('Attr.AllowedFrameTargets', array('_blank'));
            $HTMLPurifier_Config->set('Output.FlashCompat', true);
            $HTMLPurifier_Config->set('Core.RemoveInvalidImg', true);
            $HTMLPurifier_Config->set('Cache.SerializerPath', WP_CONTENT_DIR . '/uploads/kboard_htmlpurifier');
            $definition = $HTMLPurifier_Config->getHTMLDefinition(true);
            $definition->addAttribute('img', 'usemap', 'CDATA');
            $map = $definition->addElement('map', 'Block', 'Flow', 'Common', array('name'=>'CDATA', 'id'=>'ID', 'title'=>'CDATA'));
            $map->excludes = array('map'=>true);
            $area = $definition->addElement('area', 'Block', 'Empty', 'Common', array('name'=>'CDATA', 'id'=>'ID', 'alt'=>'Text', 'coords'=>'CDATA', 'accesskey'=>'Character', 'nohref' => new HTMLPurifier_AttrDef_Enum(array('nohref')), 'href' => 'URI', 'shape' => new HTMLPurifier_AttrDef_Enum(array('rect','circle','poly','default')), 'tabindex'=>'Number', 'target'=>new HTMLPurifier_AttrDef_Enum(array('_blank', '_self', '_target', '_top'))));
            $area->excludes = array('area'=>true);
            $GLOBALS['KBOARD']['HTMLPurifier_Config'] = $HTMLPurifier_Config;
            $GLOBALS['KBOARD']['HTMLPurifier'] = HTMLPurifier::getInstance();
            unset($HTMLPurifier_Config);
        }
        $data = $GLOBALS['KBOARD']['HTMLPurifier']->purify(stripslashes($data), $GLOBALS['KBOARD']['HTMLPurifier_Config']);
    }
    return $data;
}