Sanitise PeeringDB and IX-F data

This follows d3b8a54
inex · Mar 8, 2019 · b146a68 · b146a68
1 parent cd3401a
commit b146a68
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 11 deletions.
diff --git a/app/Providers/PeeringDbServiceProvider.php b/app/Providers/PeeringDbServiceProvider.php
@@ -44,9 +44,9 @@ public function boot(){
                     foreach( json_decode($ixs)->data as $ix ) {
                         $ixps[$ix->id] = [
                             'pdb_id' => $ix->id,
-                            'name' => $ix->name,
-                            'city' => $ix->city,
-                            'country' => $ix->country,
+                            'name' => htmlentities( $ix->name, ENT_QUOTES ),
+                            'city' => htmlentities( $ix->city, ENT_QUOTES ),
+                            'country' => htmlentities( $ix->country,ENT_QUOTES ),
                         ];
                     }
                 }
@@ -63,7 +63,7 @@ public function boot(){
                     foreach( json_decode( $pdb )->data as $db ) {
                         $pdbs[ $db->id ] = [
                             'id' => $db->id,
-                            'name' => $db->name,
+                            'name' => htmlentities( $db->name, ENT_QUOTES ),
                         ];
                     }
                 }

diff --git a/routes/apiv4.php b/routes/apiv4.php
@@ -78,9 +78,9 @@
             foreach( json_decode($ixs)->data as $ix ) {
                 $ixps[$ix->id] = [
                     'pdb_id' => $ix->id,
-                    'name' => $ix->name,
-                    'city' => $ix->city,
-                    'country' => $ix->country,
+                    'name' => htmlentities( $ix->name, ENT_QUOTES ),
+                    'city' => htmlentities( $ix->city, ENT_QUOTES ),
+                    'country' => htmlentities( $ix->country, ENT_QUOTES ),
                 ];
             }
         }
@@ -96,9 +96,9 @@
                 foreach( json_decode($ixs) as $ix ) {
                     $ixps[$ix->id] = [
                         'ixf_id' => $ix->id,
-                        'name' => $ix->name,
-                        'city' => $ix->city,
-                        'country' => $ix->country,
+                        'name' => htmlentities( $ix->name, ENT_QUOTES ),
+                        'city' => htmlentities( $ix->city, ENT_QUOTES ),
+                        'country' => htmlentities( $ix->country, ENT_QUOTES ),
                     ];
                 }
             }
@@ -114,7 +114,7 @@
             foreach( json_decode( $pdb )->data as $db ) {
                 $pdbs[ $db->id ] = [
                     'id' => $db->id,
-                    'name' => $db->name,
+                    'name' => htmlentities( $db->name, ENT_QUOTES ),
                 ];
             }
         }