Commit 0ee379cc authored by Frank Bergmann's avatar Frank Bergmann

- Implemented CSP (Content Security Policy)

parent eb23bccd
<!-- packages/intranet-notes/www/index.adp -->
<!-- @author Frank Bergmann (frank.bergmann@project-open.com) -->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN">
<master>
<property name="doc(title)">@page_title;literal@</property>
<property name="context">@context_bar;literal@</property>
<property name="main_navbar_label">notes</property>
<!--
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td>
<form method=get action='index'>
<%= [export_vars -form {material_group_id material_start_idx material_order_by material_how_many material_view_name}] %>
<script type="text/javascript" <if @::__csp_nonce@ not nil>nonce="@::__csp_nonce;literal@"</if>>
window.addEventListener('load', function() {
document.getElementById('list_check_all').addEventListener('click', function() { acs_ListCheckAll('confs_list', this.checked) });
});
</script>
</form>
</td>
<td>&nbsp;</td>
<td valign="top" width="30%">
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td class=rowtitle align="center">
#intranet-core.Admin_Links#
</td>
</tr>
<tr>
<td>
@admin_links;noquote@
</td>
</tr>
</table>
</td>
</tr>
</table>
<br>
<h2>@page_title;noquote@</h2>
-->
<table width="100%">
<tr><td>
<listtemplate name="@list_id@"></listtemplate>
......
......@@ -80,10 +80,7 @@ template::list::create \
-row_pretty_plural "[_ intranet-timesheet2-workflow.Confs_Items]" \
-elements {
conf_chk {
label "<input type=\"checkbox\"
name=\"_dummy\"
onclick=\"acs_ListCheckAll('confs_list', this.checked)\"
title=\"Check/uncheck all rows\">"
label "<input id=list_check_all type=\"checkbox\" name=\"_dummy\" title=\"Check/uncheck all rows\">"
display_template {
@conf_lines.conf_chk;noquote@
}
......
......@@ -251,19 +251,6 @@ template::list::create \
}
}
set ttt {
conf_chk {
label "<input type=\"checkbox\"
name=\"_dummy\"
onclick=\"acs_ListCheckAll('confs_list', this.checked)\"
title=\"Check/uncheck all rows\" disabled>"
display_template {
@multirow.conf_chk;noquote@
}
}
}
if {![info exists conf_id]} { ad_return_complaint 1 "Error: conf_id doesn't exist" }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment