Fixing XSS vulnerability by using the proper output tags

This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions

View File

@@ -2,18 +2,18 @@
@section('title', 'Financial Reports')
@section('actions')
<li><a href="{!! route('admin.finances.index') !!}"><i class="ti-menu-alt"></i>Overview</a></li>
<li><a href="{{ route('admin.finances.index') }}"><i class="ti-menu-alt"></i>Overview</a></li>
@endsection
@section('content')
<div class="card border-blue-bottom">
<div class="content">
<div style="float:right;">
{!! Form::select(
{{ Form::select(
'month_select',
$months_list,
$current_month,
['id' => 'month_select']
) !!}
) }}
</div>
@include('admin.finances.table')

View File

@@ -1,7 +1,7 @@
@foreach($transaction_groups as $group)
<h3>{!! $group['airline']->icao !!} - {!! $group['airline']->name !!}</h3>
<h3>{{ $group['airline']->icao }} - {{ $group['airline']->name }}</h3>
<table
id="finances-table"
@@ -17,16 +17,16 @@
@foreach($group['transactions'] as $ta)
<tr>
<td>
{!! $ta->transaction_group !!}
{{ $ta->transaction_group }}
</td>
<td>
@if($ta->sum_credits)
{!! money($ta->sum_credits, $ta->currency) !!}
{{ money($ta->sum_credits, $ta->currency) }}
@endif
</td>
<td>
@if($ta->sum_debits)
<i>{!! money($ta->sum_debits, $ta->currency) !!}</i>
<i>{{ money($ta->sum_debits, $ta->currency) }}</i>
@endif
</td>
</tr>
@@ -36,10 +36,10 @@
<tr>
<td></td>
<td>
{!! $group['credits'] !!}
{{ $group['credits'] }}
</td>
<td>
<i>{!! $group['debits'] !!}</i>
<i>{{ $group['debits'] }}</i>
</td>
</tr>
@@ -50,7 +50,7 @@
<b>Total</b>
</td>
<td>
{!! $group['credits']->subtract($group['debits']) !!}
{{ $group['credits']->subtract($group['debits']) }}
</td>
</tr>