From f6022809767553902133bb897b341211bf603e0b Mon Sep 17 00:00:00 2001
From: daekuk <daekuk@eactive.co.kr>
Date: Fri, 9 Jan 2026 11:19:29 +0900
Subject: [PATCH 1/2] =?UTF-8?q?XSS=20=ED=95=84=ED=84=B0=EB=A1=9C=20?=
 =?UTF-8?q?=EC=9D=B8=ED=95=9C=20()=20=ED=91=9C=EA=B8=B0=EC=98=A4=EB=A5=98?=
 =?UTF-8?q?=20=EC=88=98=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../rule/transform2/transform2ManDetail.jsp     | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/WebContent/jsp/onl/admin/rule/transform2/transform2ManDetail.jsp b/WebContent/jsp/onl/admin/rule/transform2/transform2ManDetail.jsp
index ed96fd4..d37ab64 100644
--- a/WebContent/jsp/onl/admin/rule/transform2/transform2ManDetail.jsp
+++ b/WebContent/jsp/onl/admin/rule/transform2/transform2ManDetail.jsp
@@ -705,11 +705,22 @@
 					$("input[name=eaiSvcName]").val('${param.eaiSvcName }');
 
 					var rawDesc = '${param.eaiSvcDesc}';
+					
+					// XSS filter 값 복구
+					function decodeHTMLEntities(text) {
+				        if (!text) return "";
+				        var textArea = document.createElement('textarea');
+				        textArea.innerHTML = text;
+				        return textArea.value;
+				    }
+				    
+					var cleanDesc = decodeURIComponent(rawDesc); 
+				    cleanDesc = decodeHTMLEntities(cleanDesc); 
 
-					if (rawDesc && rawDesc !== "") {
-				         $("input[name=eaiSvcDesc]").val(decodeURIComponent(rawDesc));
+				    if (cleanDesc) {
+				        $("input[name=eaiSvcDesc]").val(cleanDesc);
 				    } else {
-				         $("input[name=eaiSvcDesc]").val("");
+				        $("input[name=eaiSvcDesc]").val("");
 				    }
 
 					//$("input[name=cnvsnDesc]").val('${param.cnvsnDesc }');

From aa8f5083e0988a27d94b1c0e19126fc96ead6e42 Mon Sep 17 00:00:00 2001
From: daekuk <daekuk@eactive.co.kr>
Date: Fri, 9 Jan 2026 11:34:05 +0900
Subject: [PATCH 2/2] =?UTF-8?q?-=20searchGuid=20=EB=A5=BC=20=EC=82=AC?=
 =?UTF-8?q?=EC=9A=A9=ED=95=98=EC=A7=80=20=EC=95=8A=EA=B3=A0=20keymgtmsgctn?=
 =?UTF-8?q?t=20=EB=A5=BC=20=EC=82=AC=EC=9A=A9,=20=EA=B2=80=EC=83=89=20?=
 =?UTF-8?q?=EC=8B=9C=20guidEvent()=20=ED=95=98=EC=A7=80=EC=95=8A=EA=B2=8C?=
 =?UTF-8?q?=20=EB=B3=80=EA=B2=BD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 WebContent/jsp/onl/transaction/tracking/trackingMan.jsp | 1 -
 1 file changed, 1 deletion(-)

diff --git a/WebContent/jsp/onl/transaction/tracking/trackingMan.jsp b/WebContent/jsp/onl/transaction/tracking/trackingMan.jsp
index 0a49b40..01e9965 100644
--- a/WebContent/jsp/onl/transaction/tracking/trackingMan.jsp
+++ b/WebContent/jsp/onl/transaction/tracking/trackingMan.jsp
@@ -482,7 +482,6 @@
 
             $("input[name^=search]").keydown(function (key) {
                 if (key.keyCode == 13) {
-                    guidEvent();
                     $("#btn_search").click();
                 }
             });