oqapi/webgui
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix pasting from the AdminBar macro due to CSRF requirements.

Browse source
This commit is contained in:
Colin Kuskie 2009-07-14 23:39:14 +00:00
parent 79dbea5025
commit 60c74a2a58
3 changed files with 15 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

11
lib/WebGUI/Macro/AdminBar.pm
View file

@ -91,14 +91,19 @@ sub process {
# clipboard
my $clipboardItems = $session->asset->getAssetsInClipboard(1);
if (scalar (@$clipboardItems)) {
$out .= q{<dt class="a-m-t">}.$i18n->get("1082").q{</dt><dd class="a-m-d"><div class="bd">};
my $formProceed = $session->form->get('op') eq 'assetManager' ? 'manageAssets' : '';
$out .= q{<dt class="a-m-t">}.$i18n->get("1082").q{</dt><dd class="a-m-d"><div class="bd">}
. WebGUI::Form::formHeader($session,
{ action => $session->url->page('func=pasteList;assetId=0;proceed='.$formProceed), extras => "id='adminBarClip'", }
);
foreach my $item (@{$clipboardItems}) {
my $title = $asset->getTitle;
$out .= q{<a class="link" href="}.$asset->getUrl("func=pasteList;assetId=".$item->getId.$proceed).q{">}
$out .= q{<a class="link" href="}.$asset->getUrl("func=pasteList;assetId=".$item->getId.$proceed).q{" onclick="var thisForm = document.getElementById('adminBarClip'); thisForm.assetId.value='}.$item->getId.q{'; thisForm.submit(); return false;">}
.q{<img src="}.$item->getIcon(1).q{" style="border: 0px; vertical-align: middle;" alt="icon" /> }
.$item->getTitle.q{</a>};
}
$out .= qq{</div></dd>\n};
$out .= WebGUI::Form::formFooter($session)
. qq{</div></dd>\n};
}
### new content menu