Fixing XSS vulnerability by using the proper output tags

This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
@@ -1,12 +1,12 @@
<div id="pirep_{!! $pirep->id !!}_container">
<div id="pirep_{{ $pirep->id }}_container">
<div class="card border-blue-bottom pirep_card_container">
<div class="card-block" style="min-height: 0px">
<div class="row">
<div class="col-sm-2 text-center">
<h5>
<a class="text-c"
href="{!! route('admin.pireps.edit', [$pirep->id]) !!}">
{!! $pirep->ident !!}
href="{{ route('admin.pireps.edit', [$pirep->id]) }}">
{{ $pirep->ident }}
</a>
</h5>
<div>
@@ -19,7 +19,7 @@
@else
<div class="badge badge-info">
@endif
{!! PirepState::label($pirep->state) !!}</div>
{{ PirepState::label($pirep->state) }}</div>
</div>
</div>
<div class="col-sm-10">
@@ -28,39 +28,39 @@
<div>
<span class="description">
<b>DEP</b>&nbsp;
{!! $pirep->dpt_airport->icao !!}&nbsp;
{{ $pirep->dpt_airport->icao }}&nbsp;
<b>ARR</b>&nbsp;
{!! $pirep->arr_airport->icao !!}&nbsp;
{{ $pirep->arr_airport->icao }}&nbsp;
</span>
</div>
<div>
<span class="description"><b>Flight Time</b>&nbsp;
{!! Utils::minutesToTimeString($pirep->flight_time) !!}
{{ Utils::minutesToTimeString($pirep->flight_time) }}
</span>
</div>
<div><span class="description"><b>Aircraft</b>&nbsp;
{!! $pirep->aircraft->registration !!}
({!! $pirep->aircraft->name !!})
{{ $pirep->aircraft->registration }}
({{ $pirep->aircraft->name }})
</span>
</div>
@if(filled($pirep->level))
<div>
<span class="description"><b>Flight Level</b>&nbsp;
{!! $pirep->level !!}
{{ $pirep->level }}
</span>
</div>
@endif
<div>
<span class="description"><b>Filed Using</b>&nbsp;
{!! PirepSource::label($pirep->source) !!}
{{ PirepSource::label($pirep->source) }}
@if(filled($pirep->source_name))
({!! $pirep->source_name !!})
({{ $pirep->source_name }})
@endif
</span>
</div>
<div>
<span class="description"><b>File Date</b>&nbsp;
{!! show_datetime($pirep->created_at) !!}
{{ show_datetime($pirep->created_at) }}
</span>
</div>
</div>
@@ -72,7 +72,7 @@
</div>
<div class="row">
<div class="col-lg-12">
<div id="pirep_{!! $pirep->id !!}_actionbar" class="pull-right">
<div id="pirep_{{ $pirep->id }}_actionbar" class="pull-right">
@include('admin.pireps.actions', ['pirep' => $pirep, 'on_edit_page' => false])
</div>
</div>