make javascript more secure..

This commit is contained in:
2017-12-29 16:47:29 +01:00
parent f4625cfe06
commit ebe524ded3

View File

@@ -157,7 +157,7 @@ $(document).ready(function() {
minLength: 0, minLength: 0,
templates: { templates: {
suggestion: function(hit) { suggestion: function(hit) {
console.log('hit!');
var hitMedia = (hit.media ? ' · <span class="media">'+hit.media+'</span>' : ''); var hitMedia = (hit.media ? ' · <span class="media">'+hit.media+'</span>' : '');
var hitFree = (hit.is_free ? '<div class="search-hit-ribbon"><span>free</span></div>' : ''); var hitFree = (hit.is_free ? '<div class="search-hit-ribbon"><span>free</span></div>' : '');
var hitPicture; var hitPicture;
@@ -174,8 +174,11 @@ $(document).ready(function() {
.attr('title', hit.name) .attr('title', hit.name)
.text(hit.name); .text(hit.name);
return '' + return $('<a/>', {
'<a href="/nodes/'+ hit.objectID + '/redir" class="search-site-result" id="'+ hit.objectID + '">' + href: '/nodes/'+ hit.objectID + '/redir',
class: "search-site-result",
id: hit.objectID
}).append(
'<div class="search-hit">' + '<div class="search-hit">' +
'<div class="search-hit-thumbnail">' + '<div class="search-hit-thumbnail">' +
hitPicture + hitPicture +
@@ -184,11 +187,14 @@ $(document).ready(function() {
$searchHitName.html() + $searchHitName.html() +
'<div class="search-hit-meta">' + '<div class="search-hit-meta">' +
$span.html() + ' · ' + $span.html() + ' · ' +
'<span class="node_type">' + hit.node_type + '</span>' + $('<span>', {
class: "node_type",
text: hit.node_type
}) +
hitMedia + hitMedia +
'</div>' + '</div>' +
'</div>'+ '</div>'
'</a>'; )
} }
} }
}); });
@@ -227,7 +233,11 @@ $(document).ready(function() {
searchInput.bind('typeahead:render', function(event, suggestions, async, dataset) { searchInput.bind('typeahead:render', function(event, suggestions, async, dataset) {
if( suggestions != undefined && $('.tt-all-results').length <= 0){ if( suggestions != undefined && $('.tt-all-results').length <= 0){
$('.tt-dataset').append( $('.tt-dataset').append(
'<a id="search-advanced" href="/search?q='+ $("#cloud-search").val() + '&page=1" class="search-site-result advanced tt-suggestion">' + $("<a/>", {
id: "search-advanced",
href: '/search?q='+ $("#cloud-search").val() + '&page=1',
class: "search-site-result advanced tt-suggestion",
}).append(
'<div class="search-hit">' + '<div class="search-hit">' +
'<div class="search-hit-thumbnail">' + '<div class="search-hit-thumbnail">' +
'<div class="search-hit-thumbnail-icon">' + '<div class="search-hit-thumbnail-icon">' +
@@ -237,8 +247,9 @@ $(document).ready(function() {
'<div class="search-hit-name">' + '<div class="search-hit-name">' +
'Use Advanced Search' + 'Use Advanced Search' +
'</div>' + '</div>' +
'</div>'+ '</div>'
'</a>'); )
);
} }
}); });