织梦Dedev5.6中的跨站漏洞的修复实例方法

{dede:pagelist listsize='4'/}

{dede:pagelist listsize='4' function=RemoveXSS(@me)/}

require_once(DEDEINC.'/dedetemplate.class.php');

$gourl=empty($gourl)? urlencode(GetCurUrl()) : RemoveXSS($gourl);修改member/index.php文件第3行，找到if(empty($uid)) { $$uid = ''; }

$uid=empty($uid)? "" : RemoveXSS($uid);