XSS patch for basic models

2021-03-12 19:28:16 +05:30
parent 5d8b86bf5e
commit 309a1557d9
6 changed files with 58 additions and 6 deletions
--- a/app/Model/kb/Comment.php
+++ b/app/Model/kb/Comment.php
@@ -12,4 +12,24 @@ class Comment extends BaseModel
 {
    protected $table = 'kb_comment';
    protected $fillable = ['article_id', 'name', 'email', 'website', 'comment', 'status'];
+
+    public function setNameAttribute($value)
+    {
+    	$this->attributes['name'] = strip_tags($value);
+    }
+
+    public function setCommentAttribute($value)
+    {
+    	$this->attributes['comment'] = strip_tags($value);
+    }
+
+    public function getNameAttribute($value)
+    {
+    	return strip_tags($value);
+    }
+
+    public function getCommentAttribute($value)
+    {
+    	return strip_tags($value);
+    }
 }