FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
resources/views/admin/pireps/actions.blade.php
View File

@@ -2,34 +2,34 @@
<tr>
<td>
@if($pirep->state === PirepState::PENDING || $pirep->state === PirepState::REJECTED)
{!! Form::open(['url' => route('admin.pirep.status', ['id' => $pirep->id]),
{{ Form::open(['url' => route('admin.pirep.status', ['id' => $pirep->id]),
'method' => 'post',
'name' => 'accept_'.$pirep->id,
'id' => $pirep->id.'_accept',
'pirep_id' => $pirep->id,
'new_status' => PirepState::ACCEPTED,
'class' => $on_edit_page ? 'pirep_change_status': 'pirep_submit_status']) !!}
{!! Form::button('Accept', ['type' => 'submit', 'class' => 'btn btn-success']) !!}
{!! Form::close() !!}
'class' => $on_edit_page ? 'pirep_change_status': 'pirep_submit_status']) }}
{{ Form::button('Accept', ['type' => 'submit', 'class' => 'btn btn-success']) }}
{{ Form::close() }}
@endif
</td>
<td>&nbsp;</td>
<td>
@if($pirep->state === PirepState::PENDING || $pirep->state === PirepState::ACCEPTED)
{!! Form::open(['url' => route('admin.pirep.status', ['id' => $pirep->id]),
{{ Form::open(['url' => route('admin.pirep.status', ['id' => $pirep->id]),
'method' => 'post',
'name' => 'reject_'.$pirep->id,
'id' => $pirep->id.'_reject',
'pirep_id' => $pirep->id,
'new_status' => PirepState::REJECTED,
'class' => $on_edit_page ? 'pirep_change_status': 'pirep_submit_status']) !!}
{!! Form::button('Reject', ['type' => 'submit', 'class' => 'btn btn-danger']) !!}
{!! Form::close() !!}
'class' => $on_edit_page ? 'pirep_change_status': 'pirep_submit_status']) }}
{{ Form::button('Reject', ['type' => 'submit', 'class' => 'btn btn-danger']) }}
{{ Form::close() }}
@endif
</td>
<td>&nbsp;</td>
<td>
<a href="{!! route('admin.pireps.edit', [$pirep->id]) !!}"
<a href="{{ route('admin.pireps.edit', [$pirep->id]) }}"
class='btn btn-info btn-icon'>
<i class="fas fa-pencil-alt"></i>&nbsp;Edit</a>
</td>