You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by ha...@apache.org on 2009/05/24 06:07:07 UTC
svn commit: r778078 - in /ofbiz/trunk/applications/party:
servicedef/services.xml webapp/partymgr/communication/CommForms.xml
Author: hansbak
Date: Sun May 24 04:07:06 2009
New Revision: 778078
URL: http://svn.apache.org/viewvc?rev=778078&view=rev
Log:
make sure a input field is empty and have some more service fields set with htmlallow=safe
Modified:
ofbiz/trunk/applications/party/servicedef/services.xml
ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml
Modified: ofbiz/trunk/applications/party/servicedef/services.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/party/servicedef/services.xml?rev=778078&r1=778077&r2=778078&view=diff
==============================================================================
--- ofbiz/trunk/applications/party/servicedef/services.xml (original)
+++ ofbiz/trunk/applications/party/servicedef/services.xml Sun May 24 04:07:06 2009
@@ -677,9 +677,9 @@
<attribute name="orderId" type="String" mode="IN" optional="true"/>
<attribute name="custRequestId" type="String" mode="IN" optional="true"/>
<override name="headerString" allow-html="any"/>
- <override name="content" allow-html="any"/>
- <override name="messageId" allow-html="any"/>
- <override name="subject" allow-html="any"/>
+ <override name="content" allow-html="safe"/>
+ <override name="messageId" allow-html="safe"/>
+ <override name="subject" allow-html="safe"/>
</service>
<service name="createCommunicationEvent" engine="simple"
location="component://party/script/org/ofbiz/party/communication/CommunicationEventServices.xml" invoke="createCommunicationEventWithPermission" auth="true">
@@ -700,8 +700,9 @@
<auto-attributes entity-name="CommunicationEvent" include="pk" mode="IN" optional="false"/>
<auto-attributes entity-name="CommunicationEvent" include="nonpk" mode="IN" optional="true"/>
<attribute name="oldStatusId" type="String" mode="OUT" optional="true"/>
- <override name="messageId" allow-html="any"/>
- <override name="content" allow-html="any"/>
+ <override name="messageId" allow-html="safe"/>
+ <override name="content" allow-html="safe"/>
+ <override name="subject" allow-html="safe"/>
</service>
<service name="deleteCommunicationEvent" engine="simple"
location="component://party/script/org/ofbiz/party/communication/CommunicationEventServices.xml" invoke="deleteCommunicationEvent" auth="true">
Modified: ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml?rev=778078&r1=778077&r2=778078&view=diff
==============================================================================
--- ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml (original)
+++ ofbiz/trunk/applications/party/webapp/partymgr/communication/CommForms.xml Sun May 24 04:07:06 2009
@@ -776,7 +776,7 @@
</actions>
<field name="donePage"><hidden value="${donePage}"/></field>
<field name="communicationEventId"><hidden value="${parameters.communicationEventId}"/></field>
- <field name="partyId" tooltip="${uiLabelMap.PartyLeaveEmpty}"><lookup target-form-name="LookupPartyName"/></field>
+ <field name="partyId" entry-name="dummy" tooltip="${uiLabelMap.PartyLeaveEmpty}"><lookup target-form-name="LookupPartyName"/></field>
<field name="emailAddress"><text/></field>
<field name="firstName" position="1"><text/></field>
<field name="middleName" position="2"><text/></field>