FGFS-4.1/phpvms
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fixing XSS vulnerability by using the proper output tags

Browse Source
This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
Download Patch File Download Diff File Expand all files Collapse all files
resources/views/layouts/default/widgets/latest_news.blade.php
+4 -4
View File
@@ -10,11 +10,11 @@
@endif
@foreach($news as $item)
<h4 style="margin-top: 0px;">{!! $item->subject !!}</h4>
<p class="category">{!! $item->user->name !!}
- {!! show_datetime($item->created_at) !!}</p>
<h4 style="margin-top: 0px;">{{ $item->subject }}</h4>
<p class="category">{{ $item->user->name }}
- {{ show_datetime($item->created_at) }}</p>
{!! $item->body !!}
{{ $item->body }}
@endforeach
</div>
</div>
resources/views/layouts/default/widgets/latest_pilots.blade.php
+2 -2
View File
@@ -9,9 +9,9 @@
@foreach($users as $u)
<tr>
<td style="padding-right: 10px;">
<span class="title">{!! $u->pilot_id !!}</span>
<span class="title">{{ $u->pilot_id }}</span>
</td>
<td>{!! $u->name !!}</td>
<td>{{ $u->name }}</td>
</tr>
@endforeach
</table>
resources/views/layouts/default/widgets/latest_pireps.blade.php
+4 -4
View File
@@ -9,12 +9,12 @@
@foreach($pireps as $p)
<tr>
<td style="padding-right: 10px;">
<span class="title">{!! $p->airline->code !!}</span>
<span class="title">{{ $p->airline->code }}</span>
</td>
<td>
{!! $p->dpt_airport_id !!}-
{!! $p->arr_airport_id !!}&nbsp;
{!! $p->aircraft->name !!}
{{ $p->dpt_airport_id }}-
{{ $p->arr_airport_id }}&nbsp;
{{ $p->aircraft->name }}
</td>
</tr>
@endforeach
resources/views/layouts/default/widgets/live_map.blade.php
+8 -8
View File
@@ -2,7 +2,7 @@
<div class="col-md-12">
<h3 class="description">flight map</h3>
<div class="box-body">
<div id="map" style="width: {!! $config['width'] !!}; height: {!! $config['height'] !!}"></div>
<div id="map" style="width: {{ $config['width'] }}; height: {{ $config['height'] }}"></div>
</div>
</div>
</div>
@@ -18,11 +18,11 @@
<table class="table">
@foreach($pireps as $pirep)
<tr>
<td>{!! $pirep->ident !!}</td>
<td>{!! $pirep->dpt_airport_id !!}</td>
<td>{!! $pirep->arr_airport_id !!}</td>
<td>{{ $pirep->ident }}</td>
<td>{{ $pirep->dpt_airport_id }}</td>
<td>{{ $pirep->arr_airport_id }}</td>
<td>
{!! PirepStatus::label($pirep->status); !!}
{{ PirepStatus::label($pirep->status) }}
</td>
</tr>
@endforeach
@@ -33,9 +33,9 @@
@section('scripts')
<script type="text/javascript">
phpvms.render_live_map({
'update_uri': '{!! url('/api/acars') !!}',
'pirep_uri': '{!! url('/api/pireps/{id}/acars/geojson') !!}',
'aircraft_icon': '{!! public_asset('/assets/img/acars/aircraft.png') !!}',
'update_uri': '{{ url('/api/acars') }}',
'pirep_uri': '{{ url('/api/pireps/{id}/acars/geojson') }}',
'aircraft_icon': '{{ public_asset('/assets/img/acars/aircraft.png') }}',
});
</script>
@endsection