FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
resources/views/admin/pirepfields/create.blade.php
View File

@@ -3,9 +3,9 @@
@section('content')
<div class="card border-blue-bottom">
<div class="content">
{!! Form::open(['route' => 'admin.pirepfields.store']) !!}
{{ Form::open(['route' => 'admin.pirepfields.store']) }}
@include('admin.pirepfields.fields')
{!! Form::close() !!}
{{ Form::close() }}
</div>
</div>
@endsection

4
resources/views/admin/pirepfields/edit.blade.php
View File

@@ -3,9 +3,9 @@
@section('content')
<div class="card border-blue-bottom">
<div class="content">
{!! Form::model($field, ['route' => ['admin.pirepfields.update', $field->id], 'method' => 'patch']) !!}
{{ Form::model($field, ['route' => ['admin.pirepfields.update', $field->id], 'method' => 'patch']) }}
@include('admin.pirepfields.fields')
{!! Form::close() !!}
{{ Form::close() }}
</div>
</div>
@endsection

14
resources/views/admin/pirepfields/fields.blade.php
View File

@@ -1,21 +1,21 @@
<div class="row">
<div class="form-group col-sm-6">
{!! Form::label('name', 'Name:') !!}&nbsp;&nbsp;<span class="required">*</span>
{!! Form::text('name', null, ['class' => 'form-control']) !!}
{{ Form::label('name', 'Name:') }}&nbsp;&nbsp;<span class="required">*</span>
{{ Form::text('name', null, ['class' => 'form-control']) }}
<p class="text-danger">{{ $errors->first('name') }}</p>
</div>
<!-- Required Field -->
<div class="form-group col-sm-6">
{!! Form::label('required', 'Required:') !!}
{!! Form::hidden('required', 0) !!}
{!! Form::checkbox('required', null) !!}
{{ Form::label('required', 'Required:') }}
{{ Form::hidden('required', 0) }}
{{ Form::checkbox('required', null) }}
</div>
</div>
<div class="row">
<!-- Submit Field -->
<div class="form-group col-sm-12">
{!! Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) !!}
<a href="{!! route('admin.pirepfields.index') !!}" class="btn btn-default">Cancel</a>
{{ Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) }}
<a href="{{ route('admin.pirepfields.index') }}" class="btn btn-default">Cancel</a>
</div>
</div>

2
resources/views/admin/pirepfields/index.blade.php
View File

@@ -1,7 +1,7 @@
@extends('admin.app')
@section('title', 'PIREP Fields')
@section('actions')
<li><a href="{!! route('admin.pirepfields.create') !!}"><i class="ti-plus"></i>Add
<li><a href="{{ route('admin.pirepfields.create') }}"><i class="ti-plus"></i>Add
Field</a></li>
@endsection
@section('content')

4
resources/views/admin/pirepfields/show.blade.php
View File

@@ -2,14 +2,14 @@
@section('content')
<section class="content-header">
<h1>{!! $pirepFields->name !!}</h1>
<h1>{{ $pirepFields->name }}</h1>
</section>
<div class="content">
<div class="box box-primary">
<div class="box-body">
<div class="row" style="padding-left: 20px">
@include('admin.pirepfields.show_fields')
<a href="{!! route('admin.pirepfields.index') !!}" class="btn btn-default">Back</a>
<a href="{{ route('admin.pirepfields.index') }}" class="btn btn-default">Back</a>
</div>
</div>
</div>

20
resources/views/admin/pirepfields/show_fields.blade.php
View File

@@ -1,30 +1,30 @@
<!-- Id Field -->
<div class="form-group">
{!! Form::label('id', 'Id:') !!}
<p>{!! $field->id !!}</p>
{{ Form::label('id', 'Id:') }}
<p>{{ $field->id }}</p>
</div>
<!-- Name Field -->
<div class="form-group">
{!! Form::label('name', 'Name:') !!}
<p>{!! $field->name !!}</p>
{{ Form::label('name', 'Name:') }}
<p>{{ $field->name }}</p>
</div>
<!-- Required Field -->
<div class="form-group">
{!! Form::label('required', 'Required:') !!}
<p>{!! $field->required !!}</p>
{{ Form::label('required', 'Required:') }}
<p>{{ $field->required }}</p>
</div>
<!-- Created At Field -->
<div class="form-group">
{!! Form::label('created_at', 'Created At:') !!}
<p>{!! show_datetime($field->created_at) !!}</p>
{{ Form::label('created_at', 'Created At:') }}
<p>{{ show_datetime($field->created_at) }}</p>
</div>
<!-- Updated At Field -->
<div class="form-group">
{!! Form::label('updated_at', 'Updated At:') !!}
<p>{!! show_datetime($field->updated_at) !!}</p>
{{ Form::label('updated_at', 'Updated At:') }}
<p>{{ show_datetime($field->updated_at) }}</p>
</div>

12
resources/views/admin/pirepfields/table.blade.php
View File

@@ -15,22 +15,22 @@
<tbody>
@foreach($fields as $field)
<tr>
<td>{!! $field->name !!}</td>
<td>{{ $field->name }}</td>
<td style="text-align: center;">
@if($field->required === true)
<span class="label label-success">Required</span>
@endif
</td>
<td class="text-right">
{!! Form::open(['route' => ['admin.pirepfields.destroy', $field->id], 'method' => 'delete']) !!}
<a href="{!! route('admin.pirepfields.edit', [$field->id]) !!}"
{{ Form::open(['route' => ['admin.pirepfields.destroy', $field->id], 'method' => 'delete']) }}
<a href="{{ route('admin.pirepfields.edit', [$field->id]) }}"
class='btn btn-sm btn-success btn-icon'>
<i class="fas fa-pencil-alt"></i></a>
{!! Form::button('<i class="fa fa-times"></i>',
{{ Form::button('<i class="fa fa-times"></i>',
['type' => 'submit', 'class' => 'btn btn-sm btn-danger btn-icon',
'onclick' => "return confirm('Are you sure?')"]) !!}
{!! Form::close() !!}
'onclick' => "return confirm('Are you sure?')"]) }}
{{ Form::close() }}
</td>
</tr>
@endforeach