You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by ha...@apache.org on 2009/03/27 04:52:14 UTC
svn commit: r759017 - in /ofbiz/trunk/framework/common:
webcommon/portal/editPortalPage.ftl webcommon/portal/listPortalPortlets.ftl
widget/PortalPageScreens.xml
Author: hansbak
Date: Fri Mar 27 03:52:14 2009
New Revision: 759017
URL: http://svn.apache.org/viewvc?rev=759017&view=rev
Log:
security update
Modified:
ofbiz/trunk/framework/common/webcommon/portal/editPortalPage.ftl
ofbiz/trunk/framework/common/webcommon/portal/listPortalPortlets.ftl
ofbiz/trunk/framework/common/widget/PortalPageScreens.xml
Modified: ofbiz/trunk/framework/common/webcommon/portal/editPortalPage.ftl
URL: http://svn.apache.org/viewvc/ofbiz/trunk/framework/common/webcommon/portal/editPortalPage.ftl?rev=759017&r1=759016&r2=759017&view=diff
==============================================================================
--- ofbiz/trunk/framework/common/webcommon/portal/editPortalPage.ftl (original)
+++ ofbiz/trunk/framework/common/webcommon/portal/editPortalPage.ftl Fri Mar 27 03:52:14 2009
@@ -23,8 +23,8 @@
<td class="manage-portal-column-toolbar" style="vertical-align: top; <#if portalPageColumn.columnWidthPercentage?has_content> ${uiLabelMap.CommonWidth}:${portalPageColumn.columnWidthPercentage}%;</#if>">
<hr/>
<ul>
- <li id="delete-column"><a href="<@o...@ofbizUrl>" class="buttontext">${uiLabelMap.CommonDelete}</a></li>
- <li id="add-portlet"><a href="<@o...@ofbizUrl>" class="buttontext">${uiLabelMap.CommonAddAPortlet}</a></li>
+ <li id="delete-column"><form method="post" action="<@o...@ofbizUrl>" onSubmit="javascript:submitFormDisableSubmits(this)" name="delPortalPageId_${portalPageColumn_index}"><input name="portalPageId" value="${portalPage.portalPageId}" type="hidden"/><input name="columnSeqId" value="${portalPageColumn.columnSeqId}" type="hidden"/><input name="parentPortalPageId" value="${parameters.parentPortalPageId}" type="hidden"/></form><a class="buttontext" href="javascript:document.delPortalPageId_${portalPageColumn_index}.submit()">${uiLabelMap.CommonRemove}</a></li>
+ <li id="add-portlet"><form method="post" action="<@o...@ofbizUrl>" onSubmit="javascript:submitFormDisableSubmits(this)" name="addPortlet_${portalPageColumn_index}"><input name="portalPageId" value="${portalPage.portalPageId}" type="hidden"/><input name="columnSeqId" value="${portalPageColumn.columnSeqId}" type="hidden"/><input name="parentPortalPageId" value="${parameters.parentPortalPageId}" type="hidden"/></form><a class="buttontext" href="javascript:document.addPortlet_${portalPageColumn_index}.submit()">${uiLabelMap.CommonAddAPortlet}</a></li>
<li id="column-width">
<select name="setColWidth" onchange="window.location=this.value;">
<option value="">${uiLabelMap.CommonSetColumnWidth}</option>
@@ -54,34 +54,37 @@
<#list portalPagePortletViewList as portlet>
<#if (!portlet.columnSeqId?has_content && portalPageColumn_index == 0) || (portlet.columnSeqId?if_exists == portalPageColumn.columnSeqId)>
<#if portlet.screenName?has_content>
- <#assign portletUrlLink = "portalPageId="+portalPage.portalPageId+"&portalPortletId="+portlet.portalPortletId+"&portletSeqId="+portlet.portletSeqId+"&parentPortalPageId="+parameters.parentPortalPageId/>
+ <#assign portletFields = '<input name="portalPageId" value="' + portalPage.portalPageId + '" type="hidden"/>'>
+ <#assign portletFields = portletFields + '<input name="portalPortletId" value="' + portlet.portalPortletId + '" type="hidden"/>'>
+ <#assign portletFields = portletFields + '<input name="portletSeqId" value="' + portlet.portletSeqId + '" type="hidden"/>'>
+ <#assign portletUrlLink="">
<div class="portlet-config">
<div class="portlet-config-title-bar">
<ul>
<li class="title">Portlet : ${portlet.portletName?if_exists} [${portlet.portalPortletId}]</li>
- <li class="remove"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonRemovePortlet}"> </a></li>
+ <li class="remove"><form method="post" action="<@o...@ofbizUrl>" name="removePP_${portlet_index}">${portletFields}</form><a href="javascript:document.removePP_${portlet_index}.submit()"> </a></li>
<#if (portlet.editFormName?has_content && portlet.editFormLocation?has_content)>
- <li class="edit"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonEditPortletAttributes}"> </a></li>
+ <li class="edit"><form method="post" action="<@o...@ofbizUrl>" name="editPP_${portlet_index}">${portletFields}<input name="editAttributes" value="Y" type="hidden"/></form><a href="javascript:document.editPP_${portlet_index}.submit()"> </a></li>
</#if>
<#if !firstInColumn>
- <li class="move-up"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonMovePortletUp}"> </a></li>
+ <li class="move-up"><form method="post" action="<@o...@ofbizUrl>" name="moveUpPP_${portlet_index}">${portletFields}<input name="mode" value="UP" type="hidden"/></form><a href="javascript:document.moveUpPP_${portlet_index}.submit()"> </a></li>
</#if>
<#if portlet_has_next>
- <li class="move-down"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonMovePortletDown}"> </a></li>
+ <li class="move-down"><form method="post" action="<@o...@ofbizUrl>" name="moveDownPP_${portlet_index}">${portletFields}<input name="mode" value="DOWN" type="hidden"/></form><a href="javascript:document.moveDownPP_${portlet_index}.submit()"> </a></li>
</#if>
<#if portalPageColumn_has_next>
- <li class="move-right"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonMovePortletRight}"> </a></li>
+ <li class="move-right"><form method="post" action="<@o...@ofbizUrl>" name="moveRightPP_${portlet_index}">${portletFields}<input name="columnSeqId" value="${portalPageColumnList[portalPageColumn_index+1].columnSeqId}" type="hidden"/><input name="mode" value="RIGHT" type="hidden"/></form><a href="javascript:document.moveRightPP_${portlet_index}.submit()"> </a></li>
</#if>
<#if (portalPageColumn_index > 0)>
- <li class="move-left"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonMovePortletLeft}"> </a></li>
+ <li class="move-left"><form method="post" action="<@o...@ofbizUrl>" name="moveLeftPP_${portlet_index}">${portletFields}<input name="columnSeqId" value="${portalPageColumnList[portalPageColumn_index-1].columnSeqId}" type="hidden"/><input name="mode" value="LEFT" type="hidden"/></form><a href="javascript:document.moveLeftPP_${portlet_index}.submit()"> </a></li>
</#if>
<#if !firstInColumn>
- <li class="move-top"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonMovePortletTop}"> </a></li>
+ <li class="move-top"><form method="post" action="<@o...@ofbizUrl>" name="moveTopPP_${portlet_index}">${portletFields}<input name="mode" value="TOP" type="hidden"/></form><a href="javascript:document.moveTopPP_${portlet_index}.submit()"> </a></li>
</#if>
<#if portlet_has_next>
- <li class="move-bottom"><a href="<@o...@ofbizUrl>" title="${uiLabelMap.CommonMovePortletBottom}"> </a></li>
+ <li class="move-bottom"><form method="post" action="<@o...@ofbizUrl>" name="moveBottomPP_${portlet_index}">${portletFields}<input name="mode" value="BOTTOM" type="hidden"/></form><a href="javascript:document.moveBottomPP_${portlet_index}.submit()"> </a></li>
</#if>
<#if (portalPages.size() > 1)>
<li>
Modified: ofbiz/trunk/framework/common/webcommon/portal/listPortalPortlets.ftl
URL: http://svn.apache.org/viewvc/ofbiz/trunk/framework/common/webcommon/portal/listPortalPortlets.ftl?rev=759017&r1=759016&r2=759017&view=diff
==============================================================================
--- ofbiz/trunk/framework/common/webcommon/portal/listPortalPortlets.ftl (original)
+++ ofbiz/trunk/framework/common/webcommon/portal/listPortalPortlets.ftl Fri Mar 27 03:52:14 2009
@@ -44,7 +44,7 @@
<tr>
<td>
<div class="h2">
- <a href="<@o...@ofbizUrl>">${portalPortlet.portletName}</a>
+ <form method="post" action="<@o...@ofbizUrl>" onSubmit="javascript:submitFormDisableSubmits(this)" name="createPortalPortlet"><input name="portalPortletId" value="${portalPortlet.portalPortletId}" type="hidden"/><input name="portalPageId" value="${parameters.portalPageId}" type="hidden"/><input name="columnSeqId" value="${parameters.columnSeqId}" type="hidden"/></form><a class="buttontext" href="javascript:document.createPortalPortlet.submit()">${uiLabelMap.CommonAdd}: ${portalPortlet.portletName}</a>
</div>
<div class="tabletext">
${portalPortlet.description}
Modified: ofbiz/trunk/framework/common/widget/PortalPageScreens.xml
URL: http://svn.apache.org/viewvc/ofbiz/trunk/framework/common/widget/PortalPageScreens.xml?rev=759017&r1=759016&r2=759017&view=diff
==============================================================================
--- ofbiz/trunk/framework/common/widget/PortalPageScreens.xml (original)
+++ ofbiz/trunk/framework/common/widget/PortalPageScreens.xml Fri Mar 27 03:52:14 2009
@@ -85,7 +85,9 @@
</actions>
<widgets>
<screenlet title="${uiLabelMap.CommonPortalEditPage}: ${portalPage.portalPageName} [${portalPage.portalPageId}]">
- <link target="addPortalPageColumn?portalPageId=${portalPage.portalPageId}&parentPortalPageId=${portalPage.parentPortalPageId}" text="${uiLabelMap.CommonAddColumn}" style="buttontext"/>
+ <link target="addPortalPageColumn" style="buttontext" text="${uiLabelMap.CommonAddColumn}">
+ <parameter param-name="portalPageId" from-field="portalPage.portalPageId"/>
+ </link>
<platform-specific><html><html-template location="component://common/webcommon/portal/editPortalPage.ftl"/></html></platform-specific>
</screenlet>
</widgets>