eliseuamaro/gnu-social
1
0
Fork 0
forked from GNUsocial/gnu-social
Code Issues Pull Requests Releases Wiki Activity

Making us less dependant on javascript trust

Browse Source 
Many of the microapps are pretty javascript dependant, but at least
we should allow users to get to the new notice field without allowing
javascript to run in the browser. :)
This commit is contained in:
Mikael Nordfeldth
2014-02-24 02:05:31 +01:00
parent c0c8250ff7
commit 1e37f374b3
5 changed files with 28 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
lib/action.php
View File

@@ -681,7 +681,8 @@ class Action extends HTMLOutputter // lawsuit
function showNoticeForm()
{
// TRANS: Tab on the notice form.
$tabs = array('status' => _m('TAB','Status'));
$tabs = array('status' => array('title' => _m('TAB','Status'),
'href' => common_local_url('newnotice')));
$this->elementStart('div', 'input_forms');
@@ -689,7 +690,8 @@ class Action extends HTMLOutputter // lawsuit
$this->elementStart('ul', array('class' => 'nav',
'id' => 'input_form_nav'));
foreach ($tabs as $tag => $title) {
foreach ($tabs as $tag => $data) {
$tag = htmlspecialchars($tag);
$attrs = array('id' => 'input_form_nav_'.$tag,
'class' => 'input_form_nav_tab');
@@ -702,8 +704,9 @@ class Action extends HTMLOutputter // lawsuit
$this->elementStart('li', $attrs);
$this->element('a',
array('href' => 'javascript:SN.U.switchInputFormTab("'.$tag.'")'),
$title);
array('onclick' => 'return SN.U.switchInputFormTab("'.$tag.'");',
'href' => $data['href']),
$data['title']);
$this->elementEnd('li');
}
@@ -716,7 +719,7 @@ class Action extends HTMLOutputter // lawsuit
$form->show();
$this->elementEnd('div');
foreach ($tabs as $tag => $title) {
foreach ($tabs as $tag => $data) {
$attrs = array('class' => 'input_form',
'id' => 'input_form_'.$tag);