Escape custom fields in API response

Signed-off-by: snipe <snipe@snipe.net>
This commit is contained in:
snipe 2021-11-15 20:31:01 -08:00
parent db45de5da2
commit 476e17055b

View file

@ -93,15 +93,15 @@ class AssetsTransformer
$value = (Gate::allows('superadmin')) ? $decrypted : strtoupper(trans('admin/custom_fields/general.encrypted')); $value = (Gate::allows('superadmin')) ? $decrypted : strtoupper(trans('admin/custom_fields/general.encrypted'));
$fields_array[$field->name] = [ $fields_array[$field->name] = [
'field' => $field->convertUnicodeDbSlug(), 'field' => e($field->convertUnicodeDbSlug()),
'value' => $value, 'value' => e($value),
'field_format' => $field->format, 'field_format' => $field->format,
]; ];
} else { } else {
$fields_array[$field->name] = [ $fields_array[$field->name] = [
'field' => $field->convertUnicodeDbSlug(), 'field' => e($field->convertUnicodeDbSlug()),
'value' => $asset->{$field->convertUnicodeDbSlug()}, 'value' => e($asset->{$field->convertUnicodeDbSlug()}),
'field_format' => $field->format, 'field_format' => $field->format,
]; ];