FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
resources/views/admin/flights/subfleets.blade.php
View File

@@ -14,20 +14,20 @@
<tbody>
@foreach($flight->subfleets as $sf)
<tr>
<td>{!! $sf->type !!}</td>
<td>{!! $sf->name !!}</td>
<td>{{ $sf->type }}</td>
<td>{{ $sf->name }}</td>
<td style="width: 10%; text-align: center;" class="form-inline">
{!! Form::open(['url' => '/admin/flights/'.$flight->id.'/subfleets',
{{ Form::open(['url' => '/admin/flights/'.$flight->id.'/subfleets',
'method' => 'delete',
'class' => 'pjax_subfleet_form']) !!}
{!! Form::hidden('subfleet_id', $sf->id) !!}
'class' => 'pjax_subfleet_form']) }}
{{ Form::hidden('subfleet_id', $sf->id) }}
<div class='btn-group'>
{!! Form::button('<i class="fa fa-times"></i>',
{{ Form::button('<i class="fa fa-times"></i>',
['type' => 'submit',
'class' => 'btn btn-danger btn-xs'])
!!}
}}
</div>
{!! Form::close() !!}
{{ Form::close() }}
</td>
</tr>
@endforeach
@@ -37,21 +37,21 @@
<div class="row">
<div class="col-xs-12">
<div class="text-right">
{!! Form::open([
{{ Form::open([
'url' => '/admin/flights/'.$flight->id.'/subfleets',
'method' => 'post',
'class' => 'pjax_form form-inline pjax_subfleet_form'
])
!!}
{!! Form::select('subfleet_id', $avail_subfleets, null, [
}}
{{ Form::select('subfleet_id', $avail_subfleets, null, [
'placeholder' => 'Select Subfleet',
'class' => 'select2 form-control input-lg',
])
!!}&nbsp;
{!! Form::button('<i class="fas fa-plus"></i> add',
}}&nbsp;
{{ Form::button('<i class="fas fa-plus"></i> add',
['type' => 'submit',
'class' => 'btn btn-success btn-s']) !!}
{!! Form::close() !!}
'class' => 'btn btn-success btn-s']) }}
{{ Form::close() }}
</div>
</div>
</div>