diff --git a/resources/views/admin/plans/index.blade.php b/resources/views/admin/plans/index.blade.php index 446e523..18c22ef 100644 --- a/resources/views/admin/plans/index.blade.php +++ b/resources/views/admin/plans/index.blade.php @@ -54,15 +54,6 @@ @php // 快捷筛选:仅保留“上下文”字段(back/keyword),避免把其它筛选条件叠加导致空结果 - // 统一的 back 安全护栏:本页大量 href 采用 `{!! !!}` 原样输出,必须严控 back 注入与 nested back。 - $incomingBack = (string) request()->query('back', ''); - $safeBackForLinks = (str_starts_with($incomingBack, '/') - && !preg_match('/["\'<>]/', $incomingBack) - // back 本身不应再包含 back(避免无限嵌套导致 URL 膨胀) - && !preg_match('/(?:^|[?&])back=/', $incomingBack)) - ? $incomingBack - : ''; - $buildQuickFilterUrl = function (array $overrides) use ($safeBackForLinks) { $path = '/' . ltrim(request()->path(), '/');