diff --git a/src/main/java/com/budwk/app/web/commons/proc/XssSqlFilterProcessor.java b/src/main/java/com/budwk/app/web/commons/proc/XssSqlFilterProcessor.java
index 0b7c7c7b..11d67826 100644
--- a/src/main/java/com/budwk/app/web/commons/proc/XssSqlFilterProcessor.java
+++ b/src/main/java/com/budwk/app/web/commons/proc/XssSqlFilterProcessor.java
@@ -56,15 +56,15 @@ public class XssSqlFilterProcessor extends AbstractProcessor {
     }
 
     public void process(ActionContext ac) throws Throwable {
-//        if (checkUrl(ac) && checkParams(ac)) {
-//            if (WebUtil.isAjax(ac.getRequest())) {
-//                ac.getResponse().addHeader("loginStatus", "paramsDenied");
-//                WebUtil.rendAjaxResp(ac.getRequest(), ac.getResponse(), Result.error(Mvcs.getMessage(ac.getRequest(), "system.paramserror")));
-//            } else {
-//                new ForwardView(lerrorUri).render(ac.getRequest(), ac.getResponse(), Mvcs.getMessage(ac.getRequest(), "system.paramserror"));
-//            }
-//            return;
-//        }
+        if (checkUrl(ac) && checkParams(ac)) {
+            if (WebUtil.isAjax(ac.getRequest())) {
+                ac.getResponse().addHeader("loginStatus", "paramsDenied");
+                WebUtil.rendAjaxResp(ac.getRequest(), ac.getResponse(), Result.error(Mvcs.getMessage(ac.getRequest(), "system.paramserror")));
+            } else {
+                new ForwardView(lerrorUri).render(ac.getRequest(), ac.getResponse(), Mvcs.getMessage(ac.getRequest(), "system.paramserror"));
+            }
+            return;
+        }
         doNext(ac);
     }