Fixing XSS vulnerability by using the proper output tags

2018-03-12 17:58:12 -05:00
parent 17f9464208
commit 8076c2d8c1
165 changed files with 1187 additions and 1187 deletions
--- a/resources/views/system/scripts.blade.php
+++ b/resources/views/system/scripts.blade.php
@@ -3,7 +3,7 @@ DO NOT MODIFY THIS FILE. THINGS WILL BREAK IF YOU DO
 --}}
 <script>
@if (Auth::user())
-    const PHPVMS_USER_API_KEY = "{!! Auth::user()->api_key !!}";
+    const PHPVMS_USER_API_KEY = "{{ Auth::user()->api_key }}";
@else
    const PHPVMS_USER_API_KEY = false;
@endif