Commit 111c2a3d authored by Roque's avatar Roque Committed by Kazuhiko Shiozaki

Revert "erp5_web_renderjs_ui: add onclick property on listbox rows links rendering"

- this reverts commit d8119beb.
- risk of allowing JS injection
parent 4f460203
......@@ -92,7 +92,6 @@
element_data,
sub_element,
a_element,
a_properties,
sub_element_list,
td_element_list,
tr_element_list = [];
......@@ -157,13 +156,9 @@
if (cell.editable || !cell.href) {
sub_element_list.push(sub_element);
} else {
a_properties = {
a_element = domsugar('a', {
"href": cell.href
};
if (cell.onclick) {
a_properties.onclick = cell.onclick;
}
a_element = domsugar('a', a_properties, [sub_element]);
}, [sub_element]);
sub_element_list.push(a_element);
}
......@@ -1000,9 +995,6 @@
if (value.url_value.command) {
url_value = line_link_list[counter + index];
index += 1;
} else if (value.url_value.onclick) {
url_value = false;
value.onclick = value.url_value.onclick;
} else {
url_value = false;
}
......
......@@ -228,7 +228,7 @@
</item>
<item>
<key> <string>actor</string> </key>
<value> <unicode>zope</unicode> </value>
<value> <string>zope</string> </value>
</item>
<item>
<key> <string>comment</string> </key>
......@@ -242,7 +242,7 @@
</item>
<item>
<key> <string>serial</string> </key>
<value> <string>1016.40877.17868.16571</string> </value>
<value> <string>994.13949.44825.36573</string> </value>
</item>
<item>
<key> <string>state</string> </key>
......@@ -262,7 +262,7 @@
</tuple>
<state>
<tuple>
<float>1715876236.83</float>
<float>1629394496.1</float>
<string>UTC</string>
</tuple>
</state>
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment