FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
resources/views/admin/pireps/show_fields.blade.php
View File

@@ -3,10 +3,10 @@
<div class="box box-solid">
<div class="box-header with-border">
{{--<i class="fa fa-text-width"></i>--}}
<h3 class="box-title">{!! Form::label('dpt_airport_id', 'Dep ICAO') !!}</h3>
<h3 class="box-title">{{ Form::label('dpt_airport_id', 'Dep ICAO') }}</h3>
</div>
<div class="box-body"><p class="lead">
{!! $pirep->dpt_airport->icao !!} - {!! $pirep->dpt_airport->name !!}
{{ $pirep->dpt_airport->icao }} - {{ $pirep->dpt_airport->name }}
</p></div>
</div>
</div>
@@ -15,17 +15,17 @@
<div class="box box-solid">
<div class="box-header with-border">
{{--<i class="fa fa-text-width"></i>--}}
<h3 class="box-title">{!! Form::label('arr_airport_id', 'Arrival ICAO') !!}</h3>
<h3 class="box-title">{{ Form::label('arr_airport_id', 'Arrival ICAO') }}</h3>
</div>
<div class="box-body"><p class="lead">
{!! $pirep->arr_airport->icao !!} - {!! $pirep->arr_airport->name !!}
{{ $pirep->arr_airport->icao }} - {{ $pirep->arr_airport->name }}
</p>
</div>
</div>
</div>
<div class="form-group col-sm-3">
<div id="pirep_{!! $pirep->id !!}_actionbar" class="pull-right">
<div id="pirep_{{ $pirep->id }}_actionbar" class="pull-right">
@include('admin.pireps.actions')
</div>
</div>
@@ -35,49 +35,49 @@
<table class="table table-hover">
<tr>
<td>Pilot</td>
<td><a href="{!! route('admin.users.show', ['id' => $pirep->pilot->id]) !!}"
target="_blank">{!! $pirep->user->name !!}</a>
<td><a href="{{ route('admin.users.show', ['id' => $pirep->pilot->id]) }}"
target="_blank">{{ $pirep->user->name }}</a>
</td>
</tr>
<tr>
<td>Flight</td>
<td>
<a href="{!! route('admin.flights.show', [$pirep->flight_id]) !!}"
<a href="{{ route('admin.flights.show', [$pirep->flight_id]) }}"
target="_blank">
{!! $pirep->ident !!}
{{ $pirep->ident }}
</a>
</td>
</tr>
<tr>
<td>Aircraft</td>
<td>{!! $pirep->aircraft->subfleet->name !!}, {!! $pirep->aircraft->name !!}
({!! $pirep->aircraft->registration !!})
<td>{{ $pirep->aircraft->subfleet->name }}, {{ $pirep->aircraft->name }}
({{ $pirep->aircraft->registration }})
</td>
</tr>
<tr>
<td>Flight Time</td>
<td>{!! Utils::minutesToTimeString($pirep->flight_time) !!}</td>
<td>{{ Utils::minutesToTimeString($pirep->flight_time) }}</td>
</tr>
<tr>
<td>Flight Level</td>
<td>{!! $pirep->level !!}</td>
<td>{{ $pirep->level }}</td>
</tr>
<tr>
<td>Route</td>
<td>{!! $pirep->route !!}</td>
<td>{{ $pirep->route }}</td>
</tr>
<tr>
<td>Notes</td>
<td>{!! $pirep->notes !!}</td>
<td>{{ $pirep->notes }}</td>
</tr>
<tr>
<td>Filed On</td>
<td>{!! show_datetime($pirep->created_at) !!}</td>
<td>{{ show_datetime($pirep->created_at) }}</td>
</tr>
<tr>
<td>Updated On</td>
<td>{!! show_datetime($pirep->updated_at) !!}</td>
<td>{{ show_datetime($pirep->updated_at) }}</td>
</tr>
</table>
</div>