- Implemented CSP (Content Security Policy)

lib/risk-project-component.adp

 <div class="risk_outer">
 
+<script type="text/javascript" <if @::__csp_nonce@ not nil>nonce="@::__csp_nonce;literal@"</if>>
+window.addEventListener('load', function() { 
+     document.getElementById('list_check_all').addEventListener('click', function() { acs_ListCheckAll('risk', this.checked) });
+});
+</script>
+
+
 <table cellpadding="0" cellspacing="0" border="0" width="100%">
 
 <if @risk_chart_html@ ne "">

sql/postgresql/intranet-riskmanagement-create.sql

@@ -354,7 +354,7 @@ insert into im_view_columns (
         visible_for
 ) values (
         21000, 210, 0,
-        '<input type=checkbox name=_dummy onclick="acs_ListCheckAll(''risk'',this.checked)">',
+        '<input id=list_check_all type=checkbox name=_dummy>',
         '"<input type=checkbox name=risk_id.$risk_id id=risk.$risk_id>"',
         ''
 );

www/index.adp

@@ -7,8 +7,13 @@
 <property name="show_context_help">@show_context_help_p;literal@</property>
 
 
-<if @master_p@>
-</if>
+<!-- Show calendar on start- and end-date -->
+<script type="text/javascript" <if @::__csp_nonce@ not nil>nonce="@::__csp_nonce;literal@"</if>>
+window.addEventListener('load', function() { 
+     document.getElementById('start_date_calendar').addEventListener('click', function() { showCalendar('start_date', 'y-m-d'); });
+     document.getElementById('end_date_calendar').addEventListener('click', function() { showCalendar('end_date', 'y-m-d'); });
+});
+</script>
 
 <%= [im_box_header $page_title] %>
 @risk_html;noquote@

www/index.tcl

@@ -85,8 +85,8 @@ ad_form -extend -name $form_id -form {
     {risk_project_id:text(select),optional {label #intranet-riskmanagement.Project#} {options $project_options}}
     {risk_type_id:text(im_category_tree),optional {label #intranet-riskmanagement.Risk_Type#} {value $risk_type_id} {custom {category_type "Intranet Risk Type" translate_p 1 include_empty_name "[_ intranet-core.All]"} } }
     {risk_status_id:text(im_category_tree),optional {label #intranet-riskmanagement.Risk_Status#} {value $risk_status_id} {custom {category_type "Intranet Risk Status" translate_p 1 include_empty_name "[_ intranet-core.All]"} } }
-    {start_date:text(text) {label "[_ intranet-timesheet2.Start_Date]"} {value "$start_date"} {html {size 10}} {after_html {<input type="button" style="height:20px; width:20px; background: url('/resources/acs-templating/calendar.gif');" onclick ="return showCalendar('start_date', 'y-m-d');" >}}}
-    {end_date:text(text) {label "[_ intranet-timesheet2.End_Date]"} {value "$end_date"} {html {size 10}} {after_html {<input type="button" style="height:20px; width:20px; background: url('/resources/acs-templating/calendar.gif');" onclick ="return showCalendar('end_date', 'y-m-d');" >}}}
+    {start_date:text(text) {label "[_ intranet-timesheet2.Start_Date]"} {value "$start_date"} {html {size 10}} {after_html {<input type="button" id=start_date_calendar style="height:20px; width:20px; background: url('/resources/acs-templating/calendar.gif');" >}}}
+    {end_date:text(text) {label "[_ intranet-timesheet2.End_Date]"} {value "$end_date"} {html {size 10}} {after_html {<input type="button" id=end_date_calendar style="height:20px; width:20px; background: url('/resources/acs-templating/calendar.gif');" >}}}
 }