FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
resources/views/admin/app.blade.php
View File

@@ -1,7 +1,7 @@
<!doctype html>
<html lang="en">
<head>
<title>@yield('title') - {!! config('app.name') !!} admin</title>
<title>@yield('title') - {{ config('app.name') }} admin</title>
<meta charset="utf-8" />
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
@@ -9,9 +9,9 @@
<meta name="viewport" content="width=device-width" />
<meta name="csrf-token" content="{{ csrf_token() }}">
<script src="{!! public_asset('/assets/system/js/jquery.js') !!}"></script>
<script src="{{ public_asset('/assets/system/js/jquery.js') }}"></script>
<link rel="icon" type="image/png" href="{!! public_asset('/assets/admin/img/favicon.png') !!}">
<link rel="icon" type="image/png" href="{{ public_asset('/assets/admin/img/favicon.png') }}">
<link href='https://fonts.googleapis.com/css?family=Muli:400,300' rel='stylesheet' type='text/css'>
<link href="http://fonts.googleapis.com/css?family=Roboto:400,700,300" rel="stylesheet" type="text/css">
@@ -31,9 +31,9 @@
</style>
<script>
const BASE_URL ='{!! url('/') !!}';
const BASE_URL ='{{ url('/') }}';
@if (Auth::user())
const PHPVMS_USER_API_KEY = "{!! Auth::user()->api_key !!}";
const PHPVMS_USER_API_KEY = "{{ Auth::user()->api_key }}";
@else
const PHPVMS_USER_API_KEY = false;
@endif
@@ -95,9 +95,9 @@
</body>
<script defer src="https://use.fontawesome.com/releases/v5.0.6/js/all.js"></script>
<script src="{!! public_asset('/assets/admin/js/vendor.js') !!}"></script>
<script src="{!! public_asset('/assets/system/js/phpvms.js') !!}"></script>
<script src="{!! public_asset('/assets/admin/js/admin.js') !!}"></script>
<script src="{{ public_asset('/assets/admin/js/vendor.js') }}"></script>
<script src="{{ public_asset('/assets/system/js/phpvms.js') }}"></script>
<script src="{{ public_asset('/assets/admin/js/admin.js') }}"></script>
<script>
const getStorage = function(key) {