web/cryptpad
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

keep people from derping themselves

Browse Source 
localStorage XSS? yup. that happened
This commit is contained in:
ansuz 2016-07-07 14:17:48 +02:00
parent 750731d3db
commit 789bc3ecc1
1 changed files with 29 additions and 18 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

47
customize.dist/main.js
View File

@ -6,6 +6,7 @@ define([
], function (DecorateToolbar, Cryptpad, LilUri) { ], function (DecorateToolbar, Cryptpad, LilUri) {
var $ = window.$; var $ = window.$;
DecorateToolbar.main($('#bottom-bar')); DecorateToolbar.main($('#bottom-bar'));
Cryptpad.styleAlerts();
var $table = $('table.scroll'); var $table = $('table.scroll');
var $tbody = $table.find('tbody'); var $tbody = $table.find('tbody');
@ -62,27 +63,37 @@ define([
var id = 'pad-'+index; var id = 'pad-'+index;
$tbody.append('<tr id="'+id+'">' + var $row = $('<tr>', {
'<td>' + name + '</td>' + id: id
//'<td>' + title + '</td>' + });
'<td><a href="' + pad.href + '" title="'+ pad.title + '">' + shortTitle + '</a></td>' +
'<td>' + created + '</td>' + // created
'<td>' + date + '</td>' +
'<td class="remove" title="forget \''+shortTitle+'\'">✖</td>'+
'</tr>');
var $row = $('#'+id); var $remove = $('<td>', {
$row.find('.remove').click(function () { 'class': 'remove',
if (!window.confirm("Are you sure you'd like to forget this pad (" + shortTitle + ")?")) { return; } title: "forget '"+shortTitle + "'"
forgetPad(pad.href); }).text('✖').click(function () {
$row.fadeOut(750, function () { Cryptpad.confirm("Are you sure you'd like to forget this pad (" + shortTitle + ")?", function (yes) {
$row.remove(); if (!yes) { return; }
if (!$table.find('tr').find('td').length) { forgetPad(pad.href);
$table.remove(); $row.fadeOut(750, function () {
$tryit.text("Try it out!"); $row.remove();
} if (!$table.find('tr').find('td').length) {
$table.remove();
$tryit.text("Try it out!");
}
});
}); });
}); });
$row
.append($('<td>').text(name))
.append($('<td>').append($('<a>', {
href: pad.href,
title: pad.title,
}).text(shortTitle)))
.append($('<td>').text(created))
.append($('<td>').text(date))
.append($remove);
$tbody.append($row);
}); });
}; };