Fix security issue with markdown, thanks to @simhnna

This commit is contained in:
James Cole
2018-04-04 19:14:47 +02:00
parent 73fee4eb6b
commit 3819de4e74
5 changed files with 27 additions and 11 deletions

View File

@@ -52,4 +52,12 @@ class Note extends Model
{
return $this->morphTo();
}
/**
* @param $value
*/
public function setTextAttribute($value)
{
$this->attributes['text'] = e($value);
}
}

View File

@@ -93,6 +93,14 @@ class Rule extends Model
return $this->hasMany('FireflyIII\Models\RuleTrigger');
}
/**
* @param $value
*/
public function setDescriptionAttribute($value)
{
$this->attributes['description'] = e($value);
}
/**
* @codeCoverageIgnore
* @return \Illuminate\Database\Eloquent\Relations\BelongsTo