cuongpv/faveo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

xss-injection

Browse Source
This commit is contained in:
noor
2023-05-02 11:06:51 +05:30
committed by RafficMohammed
parent a926f50fe7
commit cf4bec91a6
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Http/Controllers/Agent/helpdesk/UserController.php
View File

@@ -171,7 +171,7 @@ class UserController extends Controller
}) })
/* column email */ /* column email */
->addColumn('email', function ($model) { ->addColumn('email', function ($model) {
$email = "<a href='".route('user.show', $model->id)."'>".$model->email.'</a>'; $email = "<a href='".route('user.show', $model->id)."'>".e($model->email).'</a>';
return $email; return $email;
}) })
@@ -179,11 +179,11 @@ class UserController extends Controller
->addColumn('mobile', function ($model) { ->addColumn('mobile', function ($model) {
$phone = ''; $phone = '';
if ($model->phone_number) { if ($model->phone_number) {
$phone = $model->ext.' '.$model->phone_number; $phone = htmlspecialchars($model->ext.' '.$model->phone_number, ENT_QUOTES, 'UTF-8');
} }
$mobile = ''; $mobile = '';
if ($model->mobile) { if ($model->mobile) {
$mobile = $model->mobile; $mobile = htmlspecialchars($model->mobile, ENT_QUOTES, 'UTF-8');
} }
$phone = $phone.'&nbsp;&nbsp;&nbsp;'.$mobile; $phone = $phone.'&nbsp;&nbsp;&nbsp;'.$mobile;