FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/views/layouts/default/auth/layout.blade.php
+4 -4
View File
@@ -7,12 +7,12 @@
<link rel="apple-touch-icon" sizes="76x76" href="/assets/frontend/img/apple-icon.png">
<link rel="icon" type="image/png" href="/assets/frontend/img/favicon.png">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
<title>@yield('title') - {!! config('app.name') !!}</title>
<title>@yield('title') - {{ config('app.name') }}</title>
<meta content='width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0, shrink-to-fit=no' name='viewport' />
<link href="https://fonts.googleapis.com/css?family=Montserrat:400,700,200" rel="stylesheet" />
<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/latest/css/font-awesome.min.css" />
<link href="{!! public_asset('/assets/frontend/css/bootstrap.min.css') !!}" rel="stylesheet" />
<link href="{!! public_asset('/assets/frontend/css/now-ui-kit.css') !!}" rel="stylesheet" />
<link href="{{ public_asset('/assets/frontend/css/bootstrap.min.css') }}" rel="stylesheet" />
<link href="{{ public_asset('/assets/frontend/css/now-ui-kit.css') }}" rel="stylesheet" />
@yield('css')
</head>
@@ -40,7 +40,7 @@
</div>
</body>
<script src="{!! public_asset('/assets/frontend/js/core/jquery.3.2.1.min.js') !!}" type="text/javascript"></script>
<script src="{{ public_asset('/assets/frontend/js/core/jquery.3.2.1.min.js') }}" type="text/javascript"></script>
@yield('scripts')
resources/views/layouts/default/auth/login.blade.php
+1 -1
View File
@@ -7,7 +7,7 @@
<form class="form" method="POST" action="{{ url('/login') }}">
<div class="header header-primary text-center">
<div class="logo-container" style="width: 320px;">
<img src="{!! public_asset('/assets/frontend/img/logo.svg') !!}" width="320" height="320" style="background: #FFF">
<img src="{{ public_asset('/assets/frontend/img/logo.svg') }}" width="320" height="320" style="background: #FFF">
</div>
</div>
<div class="content">
resources/views/layouts/default/auth/register.blade.php
+9 -9
View File
@@ -6,14 +6,14 @@
<div class="col-sm-3"></div>
<div class="col-sm-6">
{!! Form::open(['url' => '/register', 'class' => 'form-signin']) !!}
{{ Form::open(['url' => '/register', 'class' => 'form-signin']) }}
<div class="panel periodic-login">
<div class="panel-body">
<h2>Register</h2>
<label for="name" class="control-label">Full Name</label>
<div class="input-group form-group-no-border{{ $errors->has('name') ? ' has-danger' : '' }}">
{!! Form::text('name', null, ['class' => 'form-control']) !!}
{{ Form::text('name', null, ['class' => 'form-control']) }}
</div>
@if ($errors->has('name'))
<p class="text-danger">{{ $errors->first('name') }}</p>
@@ -21,7 +21,7 @@
<label for="email" class="control-label">Email Address</label>
<div class="input-group form-group-no-border{{ $errors->has('email') ? ' has-danger' : '' }}">
{!! Form::text('email', null, ['class' => 'form-control']) !!}
{{ Form::text('email', null, ['class' => 'form-control']) }}
</div>
@if ($errors->has('email'))
<p class="text-danger">{{ $errors->first('email') }}</p>
@@ -29,7 +29,7 @@
<label for="airline" class="control-label">Airline</label>
<div class="input-group form-group-no-border{{ $errors->has('airline') ? ' has-danger' : '' }}">
{!! Form::select('airline_id', $airlines, null , ['class' => 'form-control select2']) !!}
{{ Form::select('airline_id', $airlines, null , ['class' => 'form-control select2']) }}
</div>
@if ($errors->has('airline_id'))
<p class="text-danger">{{ $errors->first('airline_id') }}</p>
@@ -37,7 +37,7 @@
<label for="home_airport" class="control-label">Home Airport</label>
<div class="input-group form-group-no-border{{ $errors->has('home_airport') ? ' has-danger' : '' }}">
{!! Form::select('home_airport_id', $airports, null , ['class' => 'form-control select2']) !!}
{{ Form::select('home_airport_id', $airports, null , ['class' => 'form-control select2']) }}
</div>
@if ($errors->has('home_airport_id'))
<p class="text-danger">{{ $errors->first('home_airport_id') }}</p>
@@ -45,7 +45,7 @@
<label for="timezone" class="control-label">Timezone</label>
<div class="input-group form-group-no-border{{ $errors->has('timezone') ? ' has-danger' : '' }}">
{!! Form::select('timezone', $timezones, null, ['id'=>'timezone', 'class' => 'form-control select2' ]); !!}
{{ Form::select('timezone', $timezones, null, ['id'=>'timezone', 'class' => 'form-control select2' ]) }}
</div>
@if ($errors->has('timezone'))
<p class="text-danger">{{ $errors->first('timezone') }}</p>
@@ -53,7 +53,7 @@
<label for="password" class="control-label">Password</label>
<div class="input-group form-group-no-border{{ $errors->has('password') ? ' has-danger' : '' }}">
{!! Form::password('password', ['class' => 'form-control']) !!}
{{ Form::password('password', ['class' => 'form-control']) }}
</div>
@if ($errors->has('password'))
<p class="text-danger">{{ $errors->first('password') }}</p>
@@ -61,7 +61,7 @@
<label for="password_confirmation" class="control-label">Confirm Password</label>
<div class="input-group form-group-no-border{{ $errors->has('password_confirmation') ? ' has-danger' : '' }}">
{!! Form::password('password_confirmation', ['class' => 'form-control']) !!}
{{ Form::password('password_confirmation', ['class' => 'form-control']) }}
</div>
@if ($errors->has('password_confirmation'))
<p class="text-danger">{{ $errors->first('password_confirmation') }}</p>
@@ -71,7 +71,7 @@
<div style="width: 100%; text-align: right; padding-top: 20px;">
By registering, you agree to the Term and Conditions<br /><br />
{!! Form::submit('Register!', ['class' => 'btn btn-primary']) !!}
{{ Form::submit('Register!', ['class' => 'btn btn-primary']) }}
</div>
</div>
resources/views/layouts/default/auth/toc.blade.php
+7 -7
View File
@@ -1,14 +1,14 @@
<h4>Terms and Conditions</h4>
<textarea class="form-control" style="height: 150px; border: 1px #ccc solid;">
{!! config('app.name') !!} offers this Web site, including all information, software,
{{ config('app.name') }} offers this Web site, including all information, software,
products and services available from this Web site or offered as part of or in conjunction
with this Web site (the “Web site”), to you, the user, conditioned upon your acceptance of
all of the terms, conditions, policies and notices stated here. {!! config('app.name') !!}
all of the terms, conditions, policies and notices stated here. {{ config('app.name') }}
reserves the right to make changes to these Terms and Conditions immediately by posting the
changed Terms and Conditions in this location.
Your continued use of the Web site constitutes your agreement to all such terms, conditions
and notices, and any changes to the Terms and Conditions made by {!! config('app.name') !!}.
and notices, and any changes to the Terms and Conditions made by {{ config('app.name') }}.
The term ‘genericwebsite.com’ or ‘us’ or ‘we’ refers to the owner of the website. The term
‘you’ refers to the user or viewer of our website.
@@ -16,11 +16,11 @@ The term ‘genericwebsite.com’ or ‘us’ or ‘we’ refers to the owner of
The use of this website is subject to the following terms of use:
Use the website at your own risk. This website is provided to you “as is,” without warranty
of any kind either express or implied. Neither {!! config('app.name') !!} nor its employees,
of any kind either express or implied. Neither {{ config('app.name') }} nor its employees,
agents, third-party information providers, merchants, licensors or the like warrant that the
Web site or its operation will be accurate, reliable, uninterrupted or error-free. No agent
or representative has the authority to create any warranty regarding the Web site on behalf
of {!! config('app.name') !!}. {!! config('app.name') !!} reserves the right to change or
of {{ config('app.name') }}. {{ config('app.name') }} reserves the right to change or
discontinue at any time any aspect or feature of the Web site.
Exclusion of Liability
@@ -61,9 +61,9 @@ in these terms and conditions, you may not copy, distribute, transmit, display,
publish, license, modify, rewrite, create derivative works from, transfer, or sell any material
contained on the Web site without the prior consent of the copyright owner.
None of the material contained on {!! config('app.name') !!} may be reverse-engineered, disassembled,
None of the material contained on {{ config('app.name') }} may be reverse-engineered, disassembled,
decompiled, transcribed, stored in a retrieval system, translated into any language or computer language,
retransmitted in any form or by any means (electronic, mechanical, photo reproduction, recordation or
otherwise), resold or redistributed without the prior written consent of {!! config('app.name') !!}.
otherwise), resold or redistributed without the prior written consent of {{ config('app.name') }}.
Violation of this provision may result in severe civil and criminal penalties.
</textarea>