escaping js values

This commit is contained in:
Peter Schojer
2008-09-18 12:29:56 +00:00
parent 4d95e3bf49
commit be8daabe3c
2 changed files with 4 additions and 4 deletions

View File

@@ -130,7 +130,7 @@ Poco::WebWidgets::JSDelegate TableRenderer::createCellValueChangedServerCallback
// date fields cause problems here, and I only habe one cellclick event per table not per column!
// from the table get the TableColumn, from this get the renderer for the given col and render obj.value
// {(var r=obj.grid.getColumnModel().getRenderer(obj.column))?r(obj.value);:obj.value;}, hm renderer exists for everthing
addParams.insert(std::make_pair(Table::FIELD_VAL, "+obj.grid.getColumnModel().getRenderer(obj.column)(obj.value)"));
addParams.insert(std::make_pair(Table::FIELD_VAL, "+escape(obj.grid.getColumnModel().getRenderer(obj.column)(obj.value))"));
addParams.insert(std::make_pair(RequestHandler::KEY_EVID, Table::EV_CELLVALUECHANGED));
const std::string& success = pTable->cellValueChanged.getOnSuccess();
@@ -152,7 +152,7 @@ Poco::WebWidgets::JSDelegate TableRenderer::createBeforeCellValueChangedServerCa
// date fields cause problems here, and I only habe one cellclick event per table not per column!
// from the table get the TableColumn, from this get the renderer for the given col and render obj.value
// {(var r=obj.grid.getColumnModel().getRenderer(obj.column))?r(obj.value);:obj.value;}, hm renderer exists for everthing
addParams.insert(std::make_pair(Table::FIELD_VAL, "+obj.grid.getColumnModel().getRenderer(obj.column)(obj.value)"));
addParams.insert(std::make_pair(Table::FIELD_VAL, "+escape(obj.grid.getColumnModel().getRenderer(obj.column)(obj.value))"));
addParams.insert(std::make_pair(RequestHandler::KEY_EVID, Table::EV_BEFORECELLVALUECHANGED));
const std::string& success = pTable->beforeCellValueChanged.getOnSuccess();

View File

@@ -143,8 +143,8 @@ Poco::WebWidgets::JSDelegate TextFieldCellRenderer::createTextChangedServerCallb
// change : ( Ext.form.Field field, Mixed newVal, Mixed oldVal )
static const std::string signature("function(field,newVal,oldVal)");
std::map<std::string, std::string> addParams;
addParams.insert(std::make_pair(TextFieldCell::FIELD_OLDVAL, "+oldVal"));
addParams.insert(std::make_pair(TextFieldCell::FIELD_NEWVAL, "+newVal"));
addParams.insert(std::make_pair(TextFieldCell::FIELD_OLDVAL, "+escape(oldVal)"));
addParams.insert(std::make_pair(TextFieldCell::FIELD_NEWVAL, "+escape(newVal)"));
addParams.insert(std::make_pair(RequestHandler::KEY_EVID, TextFieldCell::EV_TEXTCHANGED));
return Utility::createServerCallback(signature, addParams, pText->id(), pText->textChanged.getOnSuccess(), pText->textChanged.getOnFailure());
}