FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
resources/views/admin/settings/table.blade.php
View File

@@ -1,18 +1,18 @@
{!! Form::model($grouped_settings, ['route' => ['admin.settings.update'], 'method' => 'post']) !!}
{{ Form::model($grouped_settings, ['route' => ['admin.settings.update'], 'method' => 'post']) }}
@foreach($grouped_settings as $group => $settings)
<div class="card border-blue-bottom">
<div class="content table-responsive table-full-width">
<table class="table table-hover" id="flights-table">
<thead>
<th colspan="2">
<h5>{!! $group !!}</h5>
<h5>{{ $group }}</h5>
</th>
</thead>
@foreach($settings as $setting)
<tr>
<td width="70%">
<p>{!! $setting->name !!}</p>
<p>{{ $setting->name }}</p>
<p class="description">
@component('admin.components.info')
{{$setting->description}}
@@ -20,20 +20,20 @@
</p></td>
<td align="center">
@if($setting->type === 'date')
{!! Form::input('text', $setting->id, $setting->value, ['class' => 'form-control', 'id' => 'datepicker']) !!}
{{ Form::input('text', $setting->id, $setting->value, ['class' => 'form-control', 'id' => 'datepicker']) }}
@elseif($setting->type === 'boolean' || $setting->type === 'bool')
{!! Form::hidden($setting->id, 0) !!}
{!! Form::checkbox($setting->id, null, $setting->value) !!}
{{ Form::hidden($setting->id, 0) }}
{{ Form::checkbox($setting->id, null, $setting->value) }}
@elseif($setting->type === 'int' || $setting->type === 'number')
{!! Form::number($setting->id, $setting->value, ['class'=>'form-control']) !!}
{{ Form::number($setting->id, $setting->value, ['class'=>'form-control']) }}
@elseif($setting->type === 'select')
{!! Form::select(
{{ Form::select(
$setting->id,
list_to_assoc(explode(',', $setting->options)),
$setting->value,
['class' => 'select2', 'style' => 'width: 100%; text-align: left;']) !!}
['class' => 'select2', 'style' => 'width: 100%; text-align: left;']) }}
@else
{!! Form::input('text', $setting->id, $setting->value, ['class' => 'form-control']) !!}
{{ Form::input('text', $setting->id, $setting->value, ['class' => 'form-control']) }}
@endif
</td>
@@ -46,12 +46,12 @@
<div class="card">
<div class="content">
<div class="text-right">
{!! Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) !!}
<a href="{!! route('admin.subfleets.index') !!}" class="btn btn-default">Cancel</a>
{{ Form::button('Save', ['type' => 'submit', 'class' => 'btn btn-success']) }}
<a href="{{ route('admin.subfleets.index') }}" class="btn btn-default">Cancel</a>
</div>
</div>
</div>
{!! Form::close() !!}
{{ Form::close() }}
<script>
$(document).ready(function () {
$('#datepicker').datetimepicker({