Skip to content

P
Platform
Commit a011627c authored by Nicolas Widart's avatar Nicolas Widart Committed by GitHub
Browse files
Options

Merge pull request #390 from moebrowne/security/user-stored-xss 

Users Full Name Stored XSS Vulnerability
parents 663bac77 03ecd43a
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 2 deletions
Themes/Adminlte/views/partials/top-nav.blade.php
View file @ a011627c
...@@ -43,7 +43,7 @@ ...@@ -43,7 +43,7 @@
<i class="glyphicon glyphicon-user"></i> <i class="glyphicon glyphicon-user"></i>
<span> <span>
<?php if ($user->present()->fullname() != ' '): ?> <?php if ($user->present()->fullname() != ' '): ?>
<?= $user->present()->fullName(); ?> {{ $user->present()->fullName() }}
<?php else: ?> <?php else: ?>
<em>{{trans('core::core.general.complete your profile')}}.</em> <em>{{trans('core::core.general.complete your profile')}}.</em>
<?php endif; ?> <?php endif; ?>
...@@ -56,7 +56,7 @@ ...@@ -56,7 +56,7 @@
<img src="{{ $user->present()->gravatar() }}" class="img-circle" alt="User Image" /> <img src="{{ $user->present()->gravatar() }}" class="img-circle" alt="User Image" />
<p> <p>
<?php if ($user->present()->fullname() != ' '): ?> <?php if ($user->present()->fullname() != ' '): ?>
<?= $user->present()->fullname(); ?> {{ $user->present()->fullname() }}
<?php else: ?> <?php else: ?>
<em>{{trans('core::core.general.complete your profile')}}.</em> <em>{{trans('core::core.general.complete your profile')}}.</em>
<?php endif; ?> <?php endif; ?>
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment

Technounit-GROUP 2023