Fixing XSS vulnerability by using the proper output tags

2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
--- a/resources/views/admin/flights/scripts.blade.php
+++ b/resources/views/admin/flights/scripts.blade.php
@@ -6,7 +6,7 @@ function setEditable() {
        type: 'text',
        mode: 'inline',
        emptytext: 'inherited',
-        url: '{!! url('/admin/flights/'.$flight->id.'/fares') !!}',
+        url: '{{ url('/admin/flights/'.$flight->id.'/fares') }}',
        title: 'Enter override value',
        ajaxOptions: {'type': 'put'},
        params: function (params) {
@@ -27,7 +27,7 @@ $(document).ready(function () {
        type: 'text',
        mode: 'inline',
        emptytext: '0',
-        url: '/admin/flights/{!! $flight->id !!}/fields',
+        url: '/admin/flights/{{ $flight->id }}/fields',
        ajaxOptions: {'type': 'put'},
        params: function (params) {
            return {