make javascript more secure..

This commit is contained in:
Stephan preeker 2017-12-29 16:47:29 +01:00
parent f4625cfe06
commit ebe524ded3

View File

@ -157,7 +157,7 @@ $(document).ready(function() {
minLength: 0, minLength: 0,
templates: { templates: {
suggestion: function(hit) { suggestion: function(hit) {
console.log('hit!');
var hitMedia = (hit.media ? ' · <span class="media">'+hit.media+'</span>' : ''); var hitMedia = (hit.media ? ' · <span class="media">'+hit.media+'</span>' : '');
var hitFree = (hit.is_free ? '<div class="search-hit-ribbon"><span>free</span></div>' : ''); var hitFree = (hit.is_free ? '<div class="search-hit-ribbon"><span>free</span></div>' : '');
var hitPicture; var hitPicture;
@ -174,21 +174,27 @@ $(document).ready(function() {
.attr('title', hit.name) .attr('title', hit.name)
.text(hit.name); .text(hit.name);
return '' + return $('<a/>', {
'<a href="/nodes/'+ hit.objectID + '/redir" class="search-site-result" id="'+ hit.objectID + '">' + href: '/nodes/'+ hit.objectID + '/redir',
'<div class="search-hit">' + class: "search-site-result",
'<div class="search-hit-thumbnail">' + id: hit.objectID
hitPicture + }).append(
hitFree + '<div class="search-hit">' +
'</div>' + '<div class="search-hit-thumbnail">' +
$searchHitName.html() + hitPicture +
'<div class="search-hit-meta">' + hitFree +
$span.html() + ' · ' + '</div>' +
'<span class="node_type">' + hit.node_type + '</span>' + $searchHitName.html() +
hitMedia + '<div class="search-hit-meta">' +
'</div>' + $span.html() + ' · ' +
'</div>'+ $('<span>', {
'</a>'; class: "node_type",
text: hit.node_type
}) +
hitMedia +
'</div>' +
'</div>'
)
} }
} }
}); });
@ -227,7 +233,11 @@ $(document).ready(function() {
searchInput.bind('typeahead:render', function(event, suggestions, async, dataset) { searchInput.bind('typeahead:render', function(event, suggestions, async, dataset) {
if( suggestions != undefined && $('.tt-all-results').length <= 0){ if( suggestions != undefined && $('.tt-all-results').length <= 0){
$('.tt-dataset').append( $('.tt-dataset').append(
'<a id="search-advanced" href="/search?q='+ $("#cloud-search").val() + '&page=1" class="search-site-result advanced tt-suggestion">' + $("<a/>", {
id: "search-advanced",
href: '/search?q='+ $("#cloud-search").val() + '&page=1',
class: "search-site-result advanced tt-suggestion",
}).append(
'<div class="search-hit">' + '<div class="search-hit">' +
'<div class="search-hit-thumbnail">' + '<div class="search-hit-thumbnail">' +
'<div class="search-hit-thumbnail-icon">' + '<div class="search-hit-thumbnail-icon">' +
@ -237,8 +247,9 @@ $(document).ready(function() {
'<div class="search-hit-name">' + '<div class="search-hit-name">' +
'Use Advanced Search' + 'Use Advanced Search' +
'</div>' + '</div>' +
'</div>'+ '</div>'
'</a>'); )
);
} }
}); });