Commit 87770459 authored by Roque's avatar Roque Committed by Léo-Paul Géneau

Revert "erp5_web_renderjs_ui: add onclick property on listbox rows links rendering"

- this reverts commit d8119beb.
- risk of allowing JS injection
parent b81a68da
...@@ -92,7 +92,6 @@ ...@@ -92,7 +92,6 @@
element_data, element_data,
sub_element, sub_element,
a_element, a_element,
a_properties,
sub_element_list, sub_element_list,
td_element_list, td_element_list,
tr_element_list = []; tr_element_list = [];
...@@ -157,13 +156,9 @@ ...@@ -157,13 +156,9 @@
if (cell.editable || !cell.href) { if (cell.editable || !cell.href) {
sub_element_list.push(sub_element); sub_element_list.push(sub_element);
} else { } else {
a_properties = { a_element = domsugar('a', {
"href": cell.href "href": cell.href
}; }, [sub_element]);
if (cell.onclick) {
a_properties.onclick = cell.onclick;
}
a_element = domsugar('a', a_properties, [sub_element]);
sub_element_list.push(a_element); sub_element_list.push(a_element);
} }
...@@ -1000,9 +995,6 @@ ...@@ -1000,9 +995,6 @@
if (value.url_value.command) { if (value.url_value.command) {
url_value = line_link_list[counter + index]; url_value = line_link_list[counter + index];
index += 1; index += 1;
} else if (value.url_value.onclick) {
url_value = false;
value.onclick = value.url_value.onclick;
} else { } else {
url_value = false; url_value = false;
} }
......
...@@ -228,7 +228,7 @@ ...@@ -228,7 +228,7 @@
</item> </item>
<item> <item>
<key> <string>actor</string> </key> <key> <string>actor</string> </key>
<value> <unicode>zope</unicode> </value> <value> <string>zope</string> </value>
</item> </item>
<item> <item>
<key> <string>comment</string> </key> <key> <string>comment</string> </key>
...@@ -242,7 +242,7 @@ ...@@ -242,7 +242,7 @@
</item> </item>
<item> <item>
<key> <string>serial</string> </key> <key> <string>serial</string> </key>
<value> <string>1016.40877.17868.16571</string> </value> <value> <string>994.13949.44825.36573</string> </value>
</item> </item>
<item> <item>
<key> <string>state</string> </key> <key> <string>state</string> </key>
...@@ -262,7 +262,7 @@ ...@@ -262,7 +262,7 @@
</tuple> </tuple>
<state> <state>
<tuple> <tuple>
<float>1715876236.83</float> <float>1629394496.1</float>
<string>UTC</string> <string>UTC</string>
</tuple> </tuple>
</state> </state>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment