devol
/
LinkStack
mirror of https://github.com/LinkStackOrg/LinkStack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Impoved validation for imports

This commit is contained in:
Julian Prieber 2024-02-05 19:23:28 +01:00
parent cc6a1195b3
commit 9447d21935
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
app/Http/Controllers/UserController.php
View File

@ -1169,12 +1169,32 @@ class UserController extends Controller
// Loop through each link in $userData and create a new link for the user // Loop through each link in $userData and create a new link for the user
foreach ($userData['links'] as $linkData) { foreach ($userData['links'] as $linkData) {
$validatedData = Validator::make($linkData, [
'link' => 'nullable|url',
]);
if ($validatedData->fails()) {
throw new \Exception('Invalid link');
}
$newLink = new Link(); $newLink = new Link();
// Copy over the link data from $linkData to $newLink // Copy over the link data from $linkData to $newLink
$newLink->button_id = $linkData['button_id']; $newLink->button_id = $linkData['button_id'];
$newLink->link = $linkData['link']; $newLink->link = $linkData['link'];
$newLink->title = $linkData['title'];
// Sanitize the title
if ($linkData['button_id'] == 93) {
$sanitizedText = strip_tags($linkData['title'], '<a><p><strong><i><ul><ol><li><blockquote><h2><h3><h4>');
$sanitizedText = preg_replace("/<a([^>]*)>/i", "<a $1 rel=\"noopener noreferrer nofollow\">", $sanitizedText);
$sanitizedText = strip_tags_except_allowed_protocols($sanitizedText);
$newLink->title = $sanitizedText;
} else {
$newLink->title = $linkData['title'];
}
$newLink->order = $linkData['order']; $newLink->order = $linkData['order'];
$newLink->click_number = 0; $newLink->click_number = 0;
$newLink->up_link = $linkData['up_link']; $newLink->up_link = $linkData['up_link'];