Skip to content

Commit 022f400

Browse files
committed
Added data sanitization on the client side to avoid XSS injections:
1 parent b45e940 commit 022f400

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

resources/views/components/editable.blade.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ class="block appearance-none w-full bg-white border-gray-300 hover:border-gray-5
2525
@click="editing = true; $nextTick(() => {$refs.input.focus()})"
2626
x-html="value"
2727
class='transition-all duration-300 ease-in-out px-2 py-1 rounded cursor-pointer focus:outline-none hover:bg-white hover:border-gray-500 border border-transparent'>
28-
{!! $model->$field !!}
28+
{!! strip_tags($model->$field) !!}
2929
</div>
3030

3131
</div>

0 commit comments

Comments
 (0)