team-alpha/railsgoat
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'add-test-case-for-a1-field-injection' of https://github.com/jmmastey/railsgoat into jmmastey-add-test-case-for-a1-field-injection

Browse Source
This commit is contained in:
cktricky
2017-10-02 19:06:11 -04:00
parent e139019c4c 585f566f88
commit f5cfec3bf4
3 changed files with 38 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/views/admin/analytics.html.erb
+11 -9
View File
@@ -1,18 +1,18 @@
<form action="">
Search by IP: <input type="text" name="ip"><br />
<input type="checkbox" value="" name="field[ip_address]"> IP Address<br />
<input type="checkbox" value="" name="field[referrer]"> Referrer<br />
<input type="checkbox" value="" name="field[user_agent]"> User Agent
<form action="" id="analytics_search">
Search by IP: <input type="text" id="ip" name="ip"><br />
<input type="checkbox" value="" id="field_ip_address" name="field[ip_address]"> IP Address<br />
<input type="checkbox" value="" id="field_referrer" name="field[referrer]"> Referrer<br />
<input type="checkbox" value="" id="field_user_agent" name="field[user_agent]"> User Agent
</form>
<div id="dt_example" class="example_alt_pagination">
<table class="table table-striped table-hover table-bordered pull-left" id="data-table">
<table class="table table-striped table-hover table-bordered pull-left <%= "custom" if params[:field] %>" id="data-table">
<thead>
<tr>
<%
count = (params[:field] ? params[:field].count : 3)
count = (params[:field] ? (custom_fields.count+1) : 6)
count.times do %>
<td>&nbsp;</td>
<th>&nbsp;</th>
<% end %>
</tr>
</thead>
@@ -33,6 +33,8 @@
</div>
</div>
<%= javascript_include_tag "jquery.dataTables.js"%>
<script type="text/javascript">
function dataTablePagination(){
@@ -42,4 +44,4 @@ function dataTablePagination(){
};
$(document).ready(dataTablePagination());
</script>
</script>