Merge pull request #211 from belguinan/patch-1

Fix XSS on search form
jsdecena · Aug 7, 2019 · 36ff6a5 · 36ff6a5
2 parents f0d5035 + 642d5de
commit 36ff6a5
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/resources/views/layouts/search.blade.php b/resources/views/layouts/search.blade.php
@@ -2,11 +2,11 @@
     <!-- search form -->
     <form action="{{$route}}" method="get" id="admin-search">
         <div class="input-group">
-            <input type="text" name="q" class="form-control" placeholder="Search..." value="{!! request()->input('q') !!}">
+            <input type="text" name="q" class="form-control" placeholder="Search..." value="{{ request()->input('q') }}">
             <span class="input-group-btn">
                 <button type="submit" id="search-btn" class="btn btn-flat"><i class="fa fa-search"></i> Search </button>
             </span>
         </div>
     </form>
     <!-- /.search form -->
-</div>
+</div>