You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by pr...@apache.org on 2016/06/13 08:31:12 UTC
svn commit: r1748138 -
/ofbiz/branches/release13.07/specialpurpose/ecommerce/webapp/ecommerce/shoppinglist/editShoppingList.ftl
Author: pranayp
Date: Mon Jun 13 08:31:12 2016
New Revision: 1748138
URL: http://svn.apache.org/viewvc?rev=1748138&view=rev
Log:
Manually applied fix from trunk revision 1748133.
---------------------------------------------------------------------
[OFBIZ-7270] - Fixed security error on Create New Shopping List in eCommerce.
Thanks Mohammed Rehan Khan for the contribution.
---------------------------------------------------------------------
Modified:
ofbiz/branches/release13.07/specialpurpose/ecommerce/webapp/ecommerce/shoppinglist/editShoppingList.ftl
Modified: ofbiz/branches/release13.07/specialpurpose/ecommerce/webapp/ecommerce/shoppinglist/editShoppingList.ftl
URL: http://svn.apache.org/viewvc/ofbiz/branches/release13.07/specialpurpose/ecommerce/webapp/ecommerce/shoppinglist/editShoppingList.ftl?rev=1748138&r1=1748137&r2=1748138&view=diff
==============================================================================
--- ofbiz/branches/release13.07/specialpurpose/ecommerce/webapp/ecommerce/shoppinglist/editShoppingList.ftl (original)
+++ ofbiz/branches/release13.07/specialpurpose/ecommerce/webapp/ecommerce/shoppinglist/editShoppingList.ftl Mon Jun 13 08:31:12 2016
@@ -83,7 +83,10 @@ under the License.
<div class="screenlet">
<div class="boxlink">
- <a href="<@o...@ofbizUrl>" class="submenutextright">${uiLabelMap.CommonCreateNew}</a>
+ <form id="createEmptyShoppingList" action="<@o...@ofbizUrl>" method="post">
+ <input type="hidden" name="productStoreId" value="${productStoreId!}" />
+ <a href="javascript:document.getElementById('createEmptyShoppingList').submit();" class="submenutextright">${uiLabelMap.CommonCreateNew}</a>
+ </form>
</div>
<h3> ${uiLabelMap.EcommerceShoppingLists}</h3>
<div class="screenlet-body">
@@ -103,7 +106,10 @@ under the License.
</form>
<#else>
<div>${uiLabelMap.EcommerceNoShoppingListsCreate}.</div>
- <a href="<@o...@ofbizUrl>" class="submenutextright">${uiLabelMap.CommonCreateNew}</a>
+ <form id="createEmptyShoppingList" action="<@o...@ofbizUrl>" method="post">
+ <input type="hidden" name="productStoreId" value="${productStoreId!}" />
+ <input type="submit" name="submit" class="smallSubmit" value="${uiLabelMap.CommonCreateNew}"/>
+ </form>
</#if>
</div>
</div>