Excluded passwords from sanitization

e40c5176 · Baran Sekin · b1eb88ff · e40c5176
Kaydet (Commit) e40c5176 authored Mar 08, 2021 tarafından Baran Sekin
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 3 deletions

XssSanitization.php app/Http/Middleware/XssSanitization.php +5 -3

No files found.
--- a/app/Http/Middleware/XssSanitization.php
+++ b/app/Http/Middleware/XssSanitization.php
@@ -13,10 +13,12 @@ class XssSanitization
            'password',
            'old_password',
            'password_confirmation',
-            'liman_password_baran'
+            'liman_password_baran',
        ]);
-        array_walk_recursive($input, function(&$input) {
-            $input = strip_tags($input);
+        array_walk_recursive($input, function(&$input, $key) {
+            if(!str_contains(strtolower($key), 'password')){
+                $input = strip_tags($input);
+            }
        });
        $request->merge($input);
        return $next($request);