Fixing XSS vulnerability by using the proper output tags

This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions

View File

@@ -10,70 +10,70 @@
</div>
<div class="row">
<div class="form-group col-sm-6">
{!! Form::label('code', 'Code:') !!}&nbsp;<span class="required">*</span>
{{ Form::label('code', 'Code:') }}&nbsp;<span class="required">*</span>
@component('admin.components.info')
How this fare class will show up on a ticket
@endcomponent
{!! Form::text('code', null, ['class' => 'form-control']) !!}
{{ Form::text('code', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('code') }}</p>
</div>
<div class="form-group col-sm-6">
{!! Form::label('name', 'Name:') !!}&nbsp;<span class="required">*</span>
{{ Form::label('name', 'Name:') }}&nbsp;<span class="required">*</span>
@component('admin.components.info')
The fare class name, E.g, "Economy" or "First"
@endcomponent
{!! Form::text('name', null, ['class' => 'form-control']) !!}
{{ Form::text('name', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('name') }}</p>
</div>
<div class="form-group col-sm-6">
{!! Form::label('price', 'Price:') !!}
{{ Form::label('price', 'Price:') }}
@component('admin.components.info')
This is the price of a ticket for a passenger
@endcomponent
{!! Form::text('price', null, ['class' => 'form-control', 'placeholder' => 0]) !!}
{{ Form::text('price', null, ['class' => 'form-control', 'placeholder' => 0]) }}
<p class="text-danger">{{ $errors->first('price') }}</p>
</div>
<div class="form-group col-sm-6">
{!! Form::label('cost', 'Cost:') !!}
{{ Form::label('cost', 'Cost:') }}
@component('admin.components.info')
The operating cost
@endcomponent
{!! Form::text('cost', null, ['class' => 'form-control', 'placeholder' => 0]) !!}
{{ Form::text('cost', null, ['class' => 'form-control', 'placeholder' => 0]) }}
<p class="text-danger">{{ $errors->first('cost') }}</p>
</div>
<div class="form-group col-sm-6">
{!! Form::label('capacity', 'Capacity:') !!}
{{ Form::label('capacity', 'Capacity:') }}
@component('admin.components.info')
The number of seats available in this class.
@endcomponent
{!! Form::text('capacity', null, ['class' => 'form-control', 'placeholder' => 0]) !!}
{{ Form::text('capacity', null, ['class' => 'form-control', 'placeholder' => 0]) }}
<p class="text-danger">{{ $errors->first('capacity') }}</p>
</div>
<div class="form-group col-sm-6">
{!! Form::label('notes', 'Notes:') !!}
{!! Form::text('notes', null, ['class' => 'form-control']) !!}
{{ Form::label('notes', 'Notes:') }}
{{ Form::text('notes', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('notes') }}</p>
</div>
<!-- Active Field -->
<div class="form-group col-sm-12">
{!! Form::label('active', 'Active:') !!}
{{ Form::label('active', 'Active:') }}
<label class="checkbox-inline">
{!! Form::hidden('active', 0, false) !!}
{!! Form::checkbox('active', 1, null) !!}
{{ Form::hidden('active', 0, false) }}
{{ Form::checkbox('active', 1, null) }}
</label>
</div>
<!-- Submit Field -->
<div class="form-group col-sm-12">
<div class="pull-right">
{!! Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) !!}
<a href="{!! route('admin.fares.index') !!}" class="btn btn-warn">Cancel</a>
{{ Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) }}
<a href="{{ route('admin.fares.index') }}" class="btn btn-warn">Cancel</a>
</div>
</div>
</div>