Server : ApacheSystem : Linux host.digitalbabaji.in 4.18.0-513.11.1.el8_9.x86_64 #1 SMP Wed Jan 17 02:00:40 EST 2024 x86_64 User : addictionfreeind ( 1003) PHP Version : 7.2.34 Disable Function : exec,passthru,shell_exec,system Directory : /home/addictionfreeind/www/admin1/vendor/froiden/envato/src/Middleware/ |
Upload File : |
<?php
namespace Froiden\Envato\Middleware;
use Closure;
use Illuminate\Http\Request;
class XSS
{
/**
* Handle incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle(Request $request, Closure $next)
{
$IGNORE_REQUESTS = config('froiden_envato.xss_ignore_index',['widget_code']);
if (!in_array(strtolower($request->method()), ['put', 'post'])) {
return $next($request);
}
$input = $request->all();
array_walk_recursive($input, function (&$input, $index) use ($IGNORE_REQUESTS) {
// Ignore for widget code
if (!empty($input) && !in_array($index, $IGNORE_REQUESTS)) {
$input = preg_replace('#<script(.*?)>(.*?)</script>#is', '', strip_tags($input));
}
});
$request->merge($input);
return $next($request);
}
}