dinislage/PrestaShop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

// No escape in JS links

Browse Source
This commit is contained in:
Damien Metzger
2013-06-07 12:33:44 +02:00
parent 0e75dbdbf8
commit aa41d6b762
6 changed files with 23 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin-dev/themes/default/template/controllers/access/helpers/form/form.tpl
+3 -3
View File
@@ -52,7 +52,7 @@
checked = enabled ? 'checked': '';
$(this).parent().parent().parent().find('.child-'+id_tab+' input[type=checkbox]').attr('checked', checked);
$.ajax({
url: "{$link->getAdminLink('AdminAccess')|escape:'html'}",
url: "{$link->getAdminLink('AdminAccess')|addslashes}",
cache: false,
data : {
ajaxMode : '1',
@@ -85,7 +85,7 @@
perfect_access_js_gestion(this, perm, id_tab, tabsize, tabnumber, table);
$.ajax({
url: "{$link->getAdminLink('AdminAccess')|escape:'html'}",
url: "{$link->getAdminLink('AdminAccess')|addslashes}",
cache: false,
data : {
ajaxMode : '1',
@@ -134,7 +134,7 @@
});
$.ajax({
url: "{$link->getAdminLink('AdminAccess')|escape:'html'}",
url: "{$link->getAdminLink('AdminAccess')|addslashes}",
cache: false,
data : {
ajaxMode: '1',
admin-dev/themes/default/template/controllers/employees/helpers/form/form.tpl
+1 -1
View File
@@ -60,7 +60,7 @@
ifSuperAdmin($(this));
$.ajax({
url: "{$link->getAdminLink('AdminEmployees')|escape:'html'}",
url: "{$link->getAdminLink('AdminEmployees')|addslashes}",
cache: false,
data : {
ajax : '1',
admin-dev/themes/default/template/controllers/information/helpers/view/view.tpl
+1 -1
View File
@@ -32,7 +32,7 @@
{
$.ajax({
type: 'GET',
url: '{$link->getAdminLink('AdminInformation')|escape:'html'}',
url: '{$link->getAdminLink('AdminInformation')|addslashes}',
data: {
'action': 'checkFiles',
'ajax': 1
admin-dev/themes/default/template/controllers/orders/form.tpl
+15 -15
View File
@@ -157,7 +157,7 @@
free_shipping = 1;
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -217,7 +217,7 @@
e.preventDefault();
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -254,7 +254,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -288,7 +288,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -324,7 +324,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -351,7 +351,7 @@
$('#id_cart').val(id_cart);
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: false,
dataType: "json",
data : {
@@ -378,7 +378,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -401,7 +401,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -534,7 +534,7 @@
$('#products_part').show();
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminOrders')|escape:'html'}",
url: "{$link->getAdminLink('AdminOrders')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -766,7 +766,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -822,7 +822,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -845,7 +845,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -868,7 +868,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -899,7 +899,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminOrders')|escape:'html'}",
url: "{$link->getAdminLink('AdminOrders')|addslashes}",
async: true,
dataType: "json",
data : {
@@ -957,7 +957,7 @@
{
$.ajax({
type:"POST",
url: "{$link->getAdminLink('AdminCarts')|escape:'html'}",
url: "{$link->getAdminLink('AdminCarts')|addslashes}",
async: true,
dataType: "json",
data : {
admin-dev/themes/default/template/controllers/products/prices.tpl
+2 -2
View File
@@ -25,7 +25,7 @@
<script type="text/javascript">
var Customer = new Object();
var product_url = '{$link->getAdminLink('AdminProducts', true)|escape:'html'}';
var product_url = '{$link->getAdminLink('AdminProducts', true)|addslashes}';
var ecotax_tax_excl = parseFloat({$ecotax_tax_excl});
$(document).ready(function () {
Customer = {
@@ -56,7 +56,7 @@ $(document).ready(function () {
Customer.showLoader();
jQuery.ajax({
"type": "POST",
"url": "{$link->getAdminLink('AdminCustomers')|escape:'html'}",
"url": "{$link->getAdminLink('AdminCustomers')|addslashes}",
"async": true,
"dataType": "json",
"data": {
admin-dev/themes/default/template/controllers/shop/tree.tpl
+1 -1
View File
@@ -186,7 +186,7 @@ $("#multishop-tree").jstree({
'plugins': ["themes","json_data","cookies","contextmenu"],
'json_data': {
'ajax': {
'url': "{$link->getAdminLink('AdminShop')|escape:'html'}",
'url': "{$link->getAdminLink('AdminShop')|addslashes}",
'data': function(n)
{
return {