aggiunta controllo regex per prevenire xss attacks e rimozione debug

Filippo Bertilotti

2 days ago 0085dcb4e3ab76219819b8a53950df1261c04453

aggiunta controllo regex per prevenire xss attacks e rimozione debug

 app/Http/Controllers/Profiles/ProfilesController.php

@@ -87,13 +87,8 @@
    }
    public function saveUser(SSOFormRequest $request) {
        $data = $request->all();
        //print_r($data);
        var_dump($data);
        $databaseHandler = new FakeSSODatabaseHandler;
        $databaseHandler->insertDataIntoTables($data);
        //$databaseHandler->testMultiSelect($data);



        return view("vodafone_fake_sso.db-create-view");
    }


 app/Http/Requests/SSOFormRequest.php

@@ -3,6 +3,7 @@
namespace App\Http\Requests;

use Illuminate\Foundation\Http\FormRequest;
use Mews\Purifier\Purifier;

class SSOFormRequest extends FormRequest
{
@@ -24,10 +25,10 @@
    public function rules()
    {
        return [
            'EmailAddress' => 'required|email',
            'Name' => 'required',
            'Surname' => 'required',
            'sim_1' => 'digits_between:10,10'
            'EmailAddress' => 'required|email|not_regex:/<[^>]+?>/',
            'Name' => 'required|not_regex:/<[^>]+?>/',
            'Surname' => 'required|not_regex:/<[^>]+?>/',
            'sim_1' => 'digits_between:10,10|not_regex:/<[^>]+?>/'
        ];
    }
}

 app/Vola/Services/FakeSSODatabase/FakeSSODatabaseHandler.php

@@ -21,11 +21,8 @@
                                           'IdPiano' => $data['IdPiano'],
                                           'LinkedUser' => $userModel->id]);

            print_r($data["products_select"]);

            foreach ($data["products_select"] as $index => $value) {
                $product = Products::find($value);
                echo "iproduct: $product->id, id msisdn: $msisdnModel->id ";
                $product->msisdn()->attach($msisdnModel->id);
            }

@@ -39,11 +36,5 @@
    public function readProducts(): array {
        $productsList = Products::select("Name", "id")->get()?->toArray();
        return $productsList;
    }

    public function testMultiSelect(array $data) {
        var_dump($data["products_select"]);
        print_r($data["products_select"][0]);
        print_r($data["products_select"][1]);
    }
}