FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
resources/views/admin/expenses/table.blade.php
View File

@@ -10,29 +10,29 @@
<tbody>
@foreach($expenses as $expense)
<tr>
<td><a href="{!! route('admin.expenses.edit', [$expense->id]) !!}">
{!! $expense->name !!}</a>
<td><a href="{{ route('admin.expenses.edit', [$expense->id]) }}">
{{ $expense->name }}</a>
</td>
<td>{!! \App\Models\Enums\ExpenseType::label($expense->type) !!}</td>
<td style="text-align: center;">{!! $expense->amount !!}</td>
<td>{{ \App\Models\Enums\ExpenseType::label($expense->type) }}</td>
<td style="text-align: center;">{{ $expense->amount }}</td>
<td>
@if(filled($expense->airline))
{!! $expense->airline->name !!}
{{ $expense->airline->name }}
@else
<span class="description">-</span>
@endif
</td>
<td class="text-center">
<span class="label label-{!! $expense->active?'success':'default' !!}">
{!! \App\Models\Enums\ActiveState::label($expense->active) !!}
<span class="label label-{{ $expense->active?'success':'default' }}">
{{ \App\Models\Enums\ActiveState::label($expense->active) }}
</span>
</td>
<td class="text-right">
{!! Form::open(['route' => ['admin.expenses.destroy', $expense->id], 'method' => 'delete']) !!}
<a href="{!! route('admin.expenses.edit', [$expense->id]) !!}"
{{ Form::open(['route' => ['admin.expenses.destroy', $expense->id], 'method' => 'delete']) }}
<a href="{{ route('admin.expenses.edit', [$expense->id]) }}"
class='btn btn-sm btn-success btn-icon'><i class="fas fa-pencil-alt"></i></a>
{!! Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) !!}
{!! Form::close() !!}
{{ Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) }}
{{ Form::close() }}
</td>
</tr>
@endforeach