FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
resources/views/admin/flights/flight_fields.blade.php
View File

@@ -11,23 +11,23 @@
<tbody>
@foreach($flight->fields as $field)
<tr>
<td>{!! $field->name !!}</td>
<td>{{ $field->name }}</td>
<td>
<a class="inline" href="#" data-pk="{!! $field->id !!}" data-name="{!! $field->name !!}">{!! $field->value !!}</a>
<a class="inline" href="#" data-pk="{{ $field->id }}" data-name="{{ $field->name }}">{{ $field->value }}</a>
</td>
<td style="width: 10%; text-align: center;" class="form-inline">
{!! Form::open(['url' => '/admin/flights/'.$flight->id.'/fields',
{{ Form::open(['url' => '/admin/flights/'.$flight->id.'/fields',
'method' => 'delete',
'class' => 'pjax_form pjax_flight_fields'
]) !!}
{!! Form::hidden('field_id', $field->id) !!}
]) }}
{{ Form::hidden('field_id', $field->id) }}
<div class='btn-group'>
{!! Form::button('<i class="fa fa-times"></i>',
{{ Form::button('<i class="fa fa-times"></i>',
['type' => 'submit',
'class' => 'btn btn-danger btn-xs'])
!!}
}}
</div>
{!! Form::close() !!}
{{ Form::close() }}
</td>
</tr>
@endforeach
@@ -37,25 +37,25 @@
<div class="row">
<div class="col-md-12">
<div class="text-right">
{!! Form::open([
{{ Form::open([
'url' => '/admin/flights/'.$flight->id.'/fields',
'method' => 'post',
'class' => 'pjax_form form-inline pjax_flight_fields'
])
!!}
}}
{!! Form::label('name', 'Name:') !!}
{!! Form::text('name', null, ['class' => 'form-control']) !!}
{{ Form::label('name', 'Name:') }}
{{ Form::text('name', null, ['class' => 'form-control']) }}
&nbsp;&nbsp;
{!! Form::label('value', 'Value:') !!}
{!! Form::text('value', null, ['class' => 'form-control']) !!}
{{ Form::label('value', 'Value:') }}
{{ Form::text('value', null, ['class' => 'form-control']) }}
&nbsp;&nbsp;
{!! Form::button('<i class="glyphicon glyphicon-plus"></i> add',
{{ Form::button('<i class="glyphicon glyphicon-plus"></i> add',
['type' => 'submit',
'class' => 'btn btn-success btn-s']) !!}
'class' => 'btn btn-success btn-s']) }}
<p class="text-danger">{{ $errors->first('name') }}</p>
<p class="text-danger">{{ $errors->first('value') }}</p>
{!! Form::close() !!}
{{ Form::close() }}
</div>
</div>
</div>