Fixing XSS vulnerability by using the proper output tags
This commit is contained in:
@@ -10,8 +10,8 @@
|
||||
<div class="row">
|
||||
<div class="col-md-8">
|
||||
<h5 style="margin-top: 0px;">
|
||||
Filed By: <a href="{!! route('admin.users.edit', [$pirep->user_id]) !!}" target="_blank">
|
||||
{!! $pirep->user->pilot_id !!} {!! $pirep->user->name !!}
|
||||
Filed By: <a href="{{ route('admin.users.edit', [$pirep->user_id]) }}" target="_blank">
|
||||
{{ $pirep->user->pilot_id }} {{ $pirep->user->name }}
|
||||
</a>
|
||||
</h5>
|
||||
</div>
|
||||
@@ -22,9 +22,9 @@
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{!! Form::model($pirep, ['route' => ['admin.pireps.update', $pirep->id], 'method' => 'patch']) !!}
|
||||
{{ Form::model($pirep, ['route' => ['admin.pireps.update', $pirep->id], 'method' => 'patch']) }}
|
||||
@include('admin.pireps.fields')
|
||||
{!! Form::close() !!}
|
||||
{{ Form::close() }}
|
||||
</div>
|
||||
</div>
|
||||
|
||||
@@ -47,7 +47,7 @@
|
||||
<div class="pull-right">
|
||||
<button id="recalculate-finances"
|
||||
class="btn btn-success"
|
||||
data-pirep-id="{!! $pirep->id !!}">Recalcuate Finances</button>
|
||||
data-pirep-id="{{ $pirep->id }}">Recalcuate Finances</button>
|
||||
</div>
|
||||
<h4>transactions</h4>
|
||||
@include('admin.pireps.transactions')
|
||||
|
||||
Reference in New Issue
Block a user