Merge pull request #175 from Gustavinho/bug/xss-bug

Bug/xss bug

Author: Gustavinho

resources/views/components/alerts-handler.blade.php

@@ -1,4 +1,5 @@
 <div
+  x-cloak
   x-data='{ open: false, message: "", type: "success" }'
   x-init="@this.on('notify', (notification) => {
     open = true;

resources/views/components/editable.blade.php

@@ -11,7 +11,8 @@
     editing: false
   }"
   @click.away="editing = false; value = original;">
-  <input x-cloak
+  <input
+    x-cloak
     x-ref="input"
     x-show="editing"
     x-model="value"
@@ -24,7 +25,7 @@ class="block appearance-none w-full bg-white border-gray-300 hover:border-gray-5
     @click="editing = true; $nextTick(() => {$refs.input.focus()})"
     x-html="value"
     class='transition-all duration-300 ease-in-out px-2 py-1 rounded cursor-pointer focus:outline-none hover:bg-white hover:border-gray-500 border border-transparent'>
-    {!! $model->$field !!}
+    {!! strip_tags($model->$field) !!}
   </div>
 
 </div>