Fixing XSS vulnerability by using the proper output tags

2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
--- a/resources/views/admin/pireps/scripts.blade.php
+++ b/resources/views/admin/pireps/scripts.blade.php
@@ -25,10 +25,10 @@ $(document).ready(() => {
        console.log('aircraft select change: ', aircraft_id);

        $.ajax({
-            url: "{!! url('/admin/pireps/fares') !!}?aircraft_id=" + aircraft_id,
+            url: "{{ url('/admin/pireps/fares') }}?aircraft_id=" + aircraft_id,
            type: 'GET',
            headers: {
-                'x-api-key': '{!! Auth::user()->api_key !!}'
+                'x-api-key': '{{ Auth::user()->api_key }}'
            },
            success: (data) => {
                console.log('returned new fares', data);