FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/views/layouts/default/profile/index.blade.php
+15 -15
View File
@@ -5,38 +5,38 @@
<div class="row profile-page content-center text-color-dark-beige">
<div class="col-md-4" style="text-align:center;">
<div class="photo-container">
<img src="{!! $user->gravatar(512) !!}" style="width: 123px;">
<img src="{{ $user->gravatar(512) }}" style="width: 123px;">
</div>
<h3 class="title">{!! $user->name !!}</h3>
<h6><span class="flag-icon flag-icon-{!! $user->country !!}"></span></h6>
<h6>{!! $user->pilot_id !!}</h6>
<h6>{!! $user->rank->name !!}</h6>
<h3 class="title">{{ $user->name }}</h3>
<h6><span class="flag-icon flag-icon-{{ $user->country }}"></span></h6>
<h6>{{ $user->pilot_id }}</h6>
<h6>{{ $user->rank->name }}</h6>
<p class="description" style="color: #9A9A9A;">
{!! $user->airline->name !!}
{{ $user->airline->name }}
</p>
</div>
<div class="col-md-8 content-center">
<div class="content">
<div class="social-description">
<h2>{!! $user->flights!!}</h2>
<h2>{{ $user->flights}}</h2>
<p>Flights</p>
</div>
<div class="social-description">
<h2>{!! \App\Facades\Utils::minutesToTimeString($user->flight_time, false) !!}</h2>
<h2>{{ \App\Facades\Utils::minutesToTimeString($user->flight_time, false) }}</h2>
<p>Flight Hours</p>
</div>
@if($user->home_airport)
<div class="social-description">
<h2>{!! $user->home_airport->icao !!}</h2>
<h2>{{ $user->home_airport->icao }}</h2>
<p>Home Airport</p>
</div>
@endif
@if($user->current_airport)
<div class="social-description">
<h2>{!! $user->current_airport->icao !!}</h2>
<h2>{{ $user->current_airport->icao }}</h2>
<p>Current Airport</p>
</div>
@endif
@@ -53,10 +53,10 @@
<div class="row">
<div class="col-sm-12">
<div class="text-right">
<a href="{!! route('frontend.profile.regen_apikey') !!}" class="btn btn-warning"
<a href="{{ route('frontend.profile.regen_apikey') }}" class="btn btn-warning"
onclick="return confirm('Are you sure? This will reset your API key.')">new api key</a>
&nbsp;
<a href="{!! route('frontend.profile.edit', ['id' => $user->id]) !!}"
<a href="{{ route('frontend.profile.edit', ['id' => $user->id]) }}"
class="btn btn-primary">edit</a>
</div>
@@ -64,15 +64,15 @@
<table class="table table-full-width">
<tr>
<td>Email</td>
<td>{!! $user->email !!}</td>
<td>{{ $user->email }}</td>
</tr>
<tr>
<td>API Key&nbsp;&nbsp;<span class="description">don't share this!</span></td>
<td>{!! $user->api_key !!}</td>
<td>{{ $user->api_key }}</td>
</tr>
<tr>
<td>Timezone</td>
<td>{!! $user->timezone !!}</td>
<td>{{ $user->timezone }}</td>
</tr>
</table>
</div>