Fixing XSS vulnerability by using the proper output tags

This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions

View File

@@ -4,10 +4,10 @@
@section('content')
<h2>phpvms updater</h2>
<p>It seems like you're up to date!</p>
{!! Form::open(['route' => 'update.complete', 'method' => 'GET']) !!}
{{ Form::open(['route' => 'update.complete', 'method' => 'GET']) }}
<p style="text-align: right">
{!! Form::submit('Complete >>', ['class' => 'btn btn-success']) !!}
{{ Form::submit('Complete >>', ['class' => 'btn btn-success']) }}
</p>
{!! Form::close() !!}
{{ Form::close() }}
@endsection

View File

@@ -4,9 +4,9 @@
@section('content')
<h2>phpvms updater</h2>
<p>Updates have been found, click run to complete the update!.</p>
{!! Form::open(['route' => 'update.run_migrations', 'method' => 'post']) !!}
{{ Form::open(['route' => 'update.run_migrations', 'method' => 'post']) }}
<p style="text-align: right">
{!! Form::submit('Run >>', ['class' => 'btn btn-success']) !!}
{{ Form::submit('Run >>', ['class' => 'btn btn-success']) }}
</p>
{!! Form::close() !!}
{{ Form::close() }}
@endsection

View File

@@ -2,17 +2,17 @@
@section('title', 'Update Completed')
@section('content')
<div style="align-content: center;">
{!! Form::open(['route' => 'update.complete', 'method' => 'GET']) !!}
{{ Form::open(['route' => 'update.complete', 'method' => 'GET']) }}
<pre class="lang-sh">
<code class="lang-sh">
{!! $console_output !!}
{{ $console_output }}
</code>
</pre>
<p style="text-align: right">
{!! Form::submit('Complete >>', ['class' => 'btn btn-success']) !!}
{{ Form::submit('Complete >>', ['class' => 'btn btn-success']) }}
</p>
{!! Form::close() !!}
{{ Form::close() }}
</div>
@endsection