From 898ce4d96238f125c9308562ca49570e7e7ae40d Mon Sep 17 00:00:00 2001 From: Alexis Gousseau Date: Mon, 1 Jun 2026 10:48:35 +0200 Subject: [PATCH] fix: :bug: update target fields to sanitize #101 --- routes/web-bo.php | 18 ++++++++---------- 1 file changed, 8 insertions(+), 10 deletions(-) diff --git a/routes/web-bo.php b/routes/web-bo.php index b616fea..98bb2b1 100644 --- a/routes/web-bo.php +++ b/routes/web-bo.php @@ -89,7 +89,7 @@ Route::middleware(['admin-secure'])->prefix('bo') // * SITES. Route::resource('sites', SiteController::class)->except('show') ->withoutMiddleware('htmlsanitize') - ->middleware('htmlsanitize:director_speach,employee_speach,highlights,content'); + ->middleware('htmlsanitize:director_speach,employee_speach,highlights'); Route::patch('/sites/{site}/change-order/{direction}', [ SiteController::class, 'changeOrder' @@ -164,10 +164,8 @@ Route::middleware(['admin-secure'])->prefix('bo') 'duplicate' ])->name('testimonials.duplicate'); - // * NETWORKS - Route::resource('networks', NetworkController::class)->except('show') - ->withoutMiddleware('htmlsanitize') - ->middleware('htmlsanitize:content'); + // * NETWORKS. + Route::resource('networks', NetworkController::class)->except('show'); Route::get('/networks/{network}/duplicate', [ NetworkController::class, 'duplicate' @@ -181,7 +179,7 @@ Route::middleware(['admin-secure'])->prefix('bo') 'changePublished' ])->name('networks.change-published'); - // * AISLES + // * AISLES. Route::resource('aisles', AisleController::class)->except('show') ->withoutMiddleware('htmlsanitize') ->middleware('htmlsanitize:text'); @@ -198,7 +196,7 @@ Route::middleware(['admin-secure'])->prefix('bo') 'changeCustomOrder' ])->name('aisles.change-order'); - // * CAROUSELS + // * CAROUSELS. Route::resource('carousels', CarouselController::class)->except('show') ->withoutMiddleware('htmlsanitize') ->middleware('htmlsanitize:media'); @@ -215,10 +213,10 @@ Route::middleware(['admin-secure'])->prefix('bo') 'changeCustomOrder' ])->name('carousels.change-order'); - // * BRANDS + // * BRANDS. Route::resource('brands', BrandController::class)->except('show') ->withoutMiddleware('htmlsanitize') - ->middleware('htmlsanitize:content'); + ->middleware('htmlsanitize:text'); Route::get('/brands/{brand}/duplicate', [ BrandController::class, 'duplicate' @@ -228,7 +226,7 @@ Route::middleware(['admin-secure'])->prefix('bo') 'changePublished' ])->name('brands.change-published'); - // * stickies. + // * STICKIES. Route::resource('stickies', StickyController::class)->except('show'); Route::get('/stickies/{sticky}/duplicate', [ StickyController::class,