Fixing XSS vulnerability by using the proper output tags
This commit is contained in:
+3
-3
@@ -15,17 +15,17 @@
|
||||
<body>
|
||||
<table class="table table-bordered table-condensed table-striped">
|
||||
@foreach($data as $row)
|
||||
@if ($row == reset($data))
|
||||
@if ($row == reset($data))
|
||||
<tr>
|
||||
@foreach($row as $key => $value)
|
||||
<th>{!! $key !!}</th>
|
||||
<th>{{ $key }}</th>
|
||||
@endforeach
|
||||
</tr>
|
||||
@endif
|
||||
<tr>
|
||||
@foreach($row as $key => $value)
|
||||
@if(is_string($value) || is_numeric($value))
|
||||
<td>{!! $value !!}</td>
|
||||
<td>{{ $value }}</td>
|
||||
@else
|
||||
<td></td>
|
||||
@endif
|
||||
|
||||
+4
-4
@@ -1,9 +1,9 @@
|
||||
{!! strip_tags($header) !!}
|
||||
{{ strip_tags($header) }}
|
||||
|
||||
{!! strip_tags($slot) !!}
|
||||
{{ strip_tags($slot) }}
|
||||
@isset($subcopy)
|
||||
|
||||
{!! strip_tags($subcopy) !!}
|
||||
{{ strip_tags($subcopy) }}
|
||||
@endisset
|
||||
|
||||
{!! strip_tags($footer) !!}
|
||||
{{ strip_tags($footer) }}
|
||||
|
||||
Reference in New Issue
Block a user