Fixing XSS vulnerability by using the proper output tags
This commit is contained in:
@@ -2,7 +2,7 @@
|
||||
<div class="col-md-12">
|
||||
<h3 class="description">flight map</h3>
|
||||
<div class="box-body">
|
||||
<div id="map" style="width: {!! $config['width'] !!}; height: {!! $config['height'] !!}"></div>
|
||||
<div id="map" style="width: {{ $config['width'] }}; height: {{ $config['height'] }}"></div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
@@ -18,11 +18,11 @@
|
||||
<table class="table">
|
||||
@foreach($pireps as $pirep)
|
||||
<tr>
|
||||
<td>{!! $pirep->ident !!}</td>
|
||||
<td>{!! $pirep->dpt_airport_id !!}</td>
|
||||
<td>{!! $pirep->arr_airport_id !!}</td>
|
||||
<td>{{ $pirep->ident }}</td>
|
||||
<td>{{ $pirep->dpt_airport_id }}</td>
|
||||
<td>{{ $pirep->arr_airport_id }}</td>
|
||||
<td>
|
||||
{!! PirepStatus::label($pirep->status); !!}
|
||||
{{ PirepStatus::label($pirep->status) }}
|
||||
</td>
|
||||
</tr>
|
||||
@endforeach
|
||||
@@ -33,9 +33,9 @@
|
||||
@section('scripts')
|
||||
<script type="text/javascript">
|
||||
phpvms.render_live_map({
|
||||
'update_uri': '{!! url('/api/acars') !!}',
|
||||
'pirep_uri': '{!! url('/api/pireps/{id}/acars/geojson') !!}',
|
||||
'aircraft_icon': '{!! public_asset('/assets/img/acars/aircraft.png') !!}',
|
||||
'update_uri': '{{ url('/api/acars') }}',
|
||||
'pirep_uri': '{{ url('/api/pireps/{id}/acars/geojson') }}',
|
||||
'aircraft_icon': '{{ public_asset('/assets/img/acars/aircraft.png') }}',
|
||||
});
|
||||
</script>
|
||||
@endsection
|
||||
|
||||
Reference in New Issue
Block a user