FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
resources/views/admin/flights/table.blade.php
View File

@@ -15,24 +15,24 @@
@foreach($flights as $flight)
<tr>
<td>
<a href="{!! route('admin.flights.edit', [$flight->id]) !!}">
{!! $flight->airline->code !!}{!! $flight->flight_number !!}
<a href="{{ route('admin.flights.edit', [$flight->id]) }}">
{{ $flight->airline->code }}{{ $flight->flight_number }}
@if($flight->route_code)
(C: {!! $flight->route_code !!} L: {!! $flight->route_leg !!})
(C: {{ $flight->route_code }} L: {{ $flight->route_leg }})
@endif
</a>
</td>
<td>{!! $flight->dpt_airport->icao !!}</td>
<td>{{ $flight->dpt_airport->icao }}</td>
<td>
{!! $flight->arr_airport->icao !!}
{{ $flight->arr_airport->icao }}
@if($flight->alt_airport)
(Alt: {!! $flight->alt_airport->icao !!})
(Alt: {{ $flight->alt_airport->icao }})
@endif
</td>
{{--<td>{!! $flight->route !!}</td>--}}
<td>{!! $flight->dpt_time !!}</td>
<td>{!! $flight->arr_time !!}</td>
<td>{!! $flight->notes !!}</td>
{{--<td>{{ $flight->route }}</td>--}}
<td>{{ $flight->dpt_time }}</td>
<td>{{ $flight->arr_time }}</td>
<td>{{ $flight->notes }}</td>
<td style="text-align: center;">
@if($flight->active == 1)
<span class="label label-success">Active</span>
@@ -41,10 +41,10 @@
@endif
</td>
<td style="text-align: right;">
{!! Form::open(['route' => ['admin.flights.destroy', $flight->id], 'method' => 'delete']) !!}
<a href="{!! route('admin.flights.edit', [$flight->id]) !!}" class='btn btn-sm btn-success btn-icon'><i class="fas fa-pencil-alt"></i></a>
{!! Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) !!}
{!! Form::close() !!}
{{ Form::open(['route' => ['admin.flights.destroy', $flight->id], 'method' => 'delete']) }}
<a href="{{ route('admin.flights.edit', [$flight->id]) }}" class='btn btn-sm btn-success btn-icon'><i class="fas fa-pencil-alt"></i></a>
{{ Form::button('<i class="fa fa-times"></i>', ['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon', 'onclick' => "return confirm('Are you sure?')"]) }}
{{ Form::close() }}
</td>
</tr>
@endforeach