Fixing XSS vulnerability by using the proper output tags

This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions

View File

@@ -1,6 +1,6 @@
<li>
<a href="{!! url('/admin/dashboard') !!}"><i class="pe-7s-display1"></i>dashboard</a>
<a href="{{ url('/admin/dashboard') }}"><i class="pe-7s-display1"></i>dashboard</a>
</li>
<li>
@@ -10,15 +10,15 @@
<div class="collapse" id="operations_menu" aria-expanded="true">
<ul class="nav">
<li><a href="{!! url('/admin/pireps') !!}"><i class="pe-7s-cloud-upload"></i>flight reports
<li><a href="{{ url('/admin/pireps') }}"><i class="pe-7s-cloud-upload"></i>flight reports
<span data-toggle="tooltip" title="3 New"
class="badge bg-light-blue pull-right">3</span>
</a>
</li>
<li><a href="{!! url('/admin/flights') !!}"><i class="pe-7s-vector"></i>flights</a></li>
<li><a href="{!! url('/admin/aircraft') !!}"><i class="pe-7s-plane"></i>fleet</a></li>
<li><a href="{!! url('/admin/fares') !!}"><i class="pe-7s-graph2"></i>fares</a></li>
<li><a href="{!! url('/admin/finances') !!}"><i class="pe-7s-display1"></i>finances</a></li>
<li><a href="{{ url('/admin/flights') }}"><i class="pe-7s-vector"></i>flights</a></li>
<li><a href="{{ url('/admin/aircraft') }}"><i class="pe-7s-plane"></i>fleet</a></li>
<li><a href="{{ url('/admin/fares') }}"><i class="pe-7s-graph2"></i>fares</a></li>
<li><a href="{{ url('/admin/finances') }}"><i class="pe-7s-display1"></i>finances</a></li>
</ul>
</div>
</li>
@@ -30,14 +30,14 @@
<div class="collapse" id="config_menu" aria-expanded="true">
<ul class="nav">
<li><a href="{!! url('/admin/airlines') !!}"><i
<li><a href="{{ url('/admin/airlines') }}"><i
class="pe-7s-paper-plane"></i>airlines</a></li>
<li><a href="{!! url('/admin/airports') !!}"><i
<li><a href="{{ url('/admin/airports') }}"><i
class="pe-7s-map-marker"></i>airports</a></li>
<li><a href="{!! url('/admin/expenses') !!}"><i class="pe-7s-cash"></i>expenses</a></li>
<li><a href="{!! url('/admin/users') !!}"><i class="pe-7s-users"></i>users</a></li>
<li><a href="{!! url('/admin/ranks') !!}"><i class="pe-7s-graph1"></i>ranks</a></li>
<li><a href="{!! url('/admin/settings') !!}"><i class="pe-7s-config"></i>settings</a></li>
<li><a href="{{ url('/admin/expenses') }}"><i class="pe-7s-cash"></i>expenses</a></li>
<li><a href="{{ url('/admin/users') }}"><i class="pe-7s-users"></i>users</a></li>
<li><a href="{{ url('/admin/ranks') }}"><i class="pe-7s-graph1"></i>ranks</a></li>
<li><a href="{{ url('/admin/settings') }}"><i class="pe-7s-config"></i>settings</a></li>
</ul>
</div>
</li>
@@ -50,7 +50,7 @@
<div class="collapse" id="addons_menu" aria-expanded="true">
<ul class="nav">
@foreach($moduleSvc->getAdminLinks() as &$link)
<li><a href="{!! url($link['url']) !!}"><i class="{!! $link['icon'] !!}"></i>{!! $link['title'] !!}</a></li>
<li><a href="{{ url($link['url']) }}"><i class="{{ $link['icon'] }}"></i>{{ $link['title'] }}</a></li>
@endforeach
</ul>
</div>