Fixing XSS vulnerability by using the proper output tags

This commit is contained in:
Nabeel Shahzad
2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions

View File

@@ -2,7 +2,7 @@
<div class="col-md-12">
<h3 class="description">flight map</h3>
<div class="box-body">
<div id="map" style="width: {!! $config['width'] !!}; height: {!! $config['height'] !!}"></div>
<div id="map" style="width: {{ $config['width'] }}; height: {{ $config['height'] }}"></div>
</div>
</div>
</div>
@@ -18,11 +18,11 @@
<table class="table">
@foreach($pireps as $pirep)
<tr>
<td>{!! $pirep->ident !!}</td>
<td>{!! $pirep->dpt_airport_id !!}</td>
<td>{!! $pirep->arr_airport_id !!}</td>
<td>{{ $pirep->ident }}</td>
<td>{{ $pirep->dpt_airport_id }}</td>
<td>{{ $pirep->arr_airport_id }}</td>
<td>
{!! PirepStatus::label($pirep->status); !!}
{{ PirepStatus::label($pirep->status) }}
</td>
</tr>
@endforeach
@@ -33,9 +33,9 @@
@section('scripts')
<script type="text/javascript">
phpvms.render_live_map({
'update_uri': '{!! url('/api/acars') !!}',
'pirep_uri': '{!! url('/api/pireps/{id}/acars/geojson') !!}',
'aircraft_icon': '{!! public_asset('/assets/img/acars/aircraft.png') !!}',
'update_uri': '{{ url('/api/acars') }}',
'pirep_uri': '{{ url('/api/pireps/{id}/acars/geojson') }}',
'aircraft_icon': '{{ public_asset('/assets/img/acars/aircraft.png') }}',
});
</script>
@endsection