Skip to content

Commit 0eafbc0

Browse files
committed
Escape query string
1 parent 88aa538 commit 0eafbc0

File tree

3 files changed

+21
-17
lines changed

3 files changed

+21
-17
lines changed

app/views/forum/_tag_chooser.blade.php

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
11
<div class="row">
2-
@if($tags->count() > 0)
2+
@if ($tags->count() > 0)
33
<h3>Describe your post by clicking up to 3 tags</h3>
44
{{ $errors->first('tags', '<small class="error">:message</small>') }}
55
<ul class="tags _tag_list">
6-
@foreach($tags as $tag)
6+
@foreach ($tags as $tag)
77
<li>
88
<a href="#" class="tag _tag" title="{{ $tag->name }}">{{ $tag->name }}</a>
99
</li>
@@ -15,7 +15,7 @@
1515
</ul>
1616
</div>
1717
<div style="display:none;" class="_tags">
18-
@foreach($tags as $tag)
18+
@foreach ($tags as $tag)
1919
<div class="_tag" title="{{ $tag->name }}">
2020
{{ Form::checkbox("tags[{$tag->id}]", $tag->id, isset($comment) ? $comment->hasTag($tag->id) : null, ['title' => $tag->name]) }}
2121
<span class="_name">{{ $tag->name }}</span>

app/views/forum/threads/index.blade.php

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -8,21 +8,23 @@
88
<section class="forum">
99
<div class="header">
1010
<h1>Forum</h1>
11-
{{-- Display select tags --}}
12-
@if (Input::get('tags', null))
13-
<div class="tags">
14-
{{{ Input::get('tags') }}}
15-
</div>
16-
@endif
11+
12+
{{-- Display select tags --}}
13+
@if (Input::get('tags', null))
14+
<div class="tags">
15+
{{{ Input::get('tags') }}}
16+
</div>
17+
@endif
18+
1719
<a class="button" href="{{ action('ForumThreadsController@getCreateThread') }}">Create Thread</a>
1820
</div>
1921

2022
<div class="filter">
2123
<p>Showing:</p>
2224
<ul>
23-
<li><a href="{{ action('ForumThreadsController@getIndex', '') . $queryString }}" class="{{ Request::path() == 'forum' ? 'current' : '' }}">All</a></li>
24-
<li><a href="{{ action('ForumThreadsController@getIndex', 'open') . $queryString }}" class="{{ Request::is('forum/open') ? 'current' : '' }}">Open</a></li>
25-
<li><a href="{{ action('ForumThreadsController@getIndex', 'solved') . $queryString }}" class="{{ Request::is('forum/solved') ? 'current' : '' }}">Solved</a></li>
25+
<li><a href="{{{ action('ForumThreadsController@getIndex', '') . $queryString }}}" class="{{ Request::path() == 'forum' ? 'current' : '' }}">All</a></li>
26+
<li><a href="{{{ action('ForumThreadsController@getIndex', 'open') . $queryString }}}" class="{{ Request::is('forum/open') ? 'current' : '' }}">Open</a></li>
27+
<li><a href="{{{ action('ForumThreadsController@getIndex', 'solved') . $queryString }}}" class="{{ Request::is('forum/solved') ? 'current' : '' }}">Solved</a></li>
2628
</ul>
2729
</div>
2830

app/views/forum/threads/show.blade.php

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,23 +14,24 @@
1414
{{ $replies->links() }}
1515
</div>
1616

17-
@if(Input::get('page') < 2)
17+
@if (Input::get('page') < 2)
1818
@include('forum.threads._thread')
1919
@endif
2020

2121
<div class="comments">
22-
@foreach($replies as $reply)
22+
@foreach ($replies as $reply)
2323
@include('forum.replies._show')
2424
@endforeach
2525
</div>
2626
{{ $replies->links() }}
2727
</div>
2828

29-
@if(Auth::check())
29+
@if (Auth::check())
3030
@include('forum.replies._create')
3131
@else
3232
<div class="login-cta">
33-
<p>Want to reply to this thread?</p> <a class="button" href="{{ action('AuthController@getLogin') }}">Login with github.</a>
33+
<p>Want to reply to this thread?</p>
34+
<a class="button" href="{{ action('AuthController@getLogin') }}">Login with github.</a>
3435
</div>
3536
@endif
3637
@stop
@@ -40,7 +41,8 @@
4041

4142
@section('scripts')
4243
@parent
44+
4345
<link rel="stylesheet" href="http://yandex.st/highlightjs/7.5/styles/obsidian.min.css">
4446
<script src="http://yandex.st/highlightjs/7.5/highlight.min.js"></script>
4547
<script>hljs.initHighlightingOnLoad();</script>
46-
@stop
48+
@stop

0 commit comments

Comments
 (0)