Files
alfresco-community-repo/source/web/jsp/users/new-user-wizard/new-user-properties.jsp
Erik Winlof edf3bf9d3f Fixed ETHREEOH-2888 "Incorrect system behavior on creating group with XSS in ASCII code and actions with it."
- Id is now decoded in the action links
- Added nodeName validator to webclient for groupids (and username) since that is what is used in share (means that "<" and ">" characters now are forbidden)

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@16958 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
2009-10-15 11:57:59 +00:00

137 lines
6.0 KiB
Plaintext

<%--
* Copyright (C) 2005-2007 Alfresco Software Limited.
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* As a special exception to the terms and conditions of version 2.0 of
* the GPL, you may redistribute this Program in connection with Free/Libre
* and Open Source Software ("FLOSS") applications as described in Alfresco's
* FLOSS exception. You should have recieved a copy of the text describing
* the FLOSS exception, and it is also available here:
* http://www.alfresco.com/legal/licensing"
--%>
<%@ taglib uri="http://java.sun.com/jsf/html" prefix="h" %>
<%@ taglib uri="http://java.sun.com/jsf/core" prefix="f" %>
<%@ taglib uri="http://java.sun.com/jsp/jstl/core" prefix="c" %>
<%@ taglib uri="/WEB-INF/alfresco.tld" prefix="a" %>
<%@ taglib uri="/WEB-INF/repo.tld" prefix="r" %>
<f:verbatim>
<script type="text/javascript" src="<%=request.getContextPath()%>/scripts/validation.js"> </script>
<script type="text/javascript">
var finishButtonPressed = false;
window.onload = pageLoaded;
function pageLoaded()
{
if (document.getElementById("wizard:wizard-body:userName") != null &&
document.getElementById("wizard:wizard-body:userName").disabled == false)
{
document.getElementById("wizard:wizard-body:userName").focus();
document.getElementById("wizard").onsubmit = validate;
document.getElementById("wizard:finish-button").onclick = function() {finishButtonPressed = true;}
document.getElementById("wizard:next-button").onclick = function() {finishButtonPressed = true;}
}
else
{
document.getElementById("wizard:wizard-body:homeSpaceName").focus();
}
updateButtonState();
}
function updateButtonState()
{
if (document.getElementById("wizard:wizard-body:password") != null &&
document.getElementById("wizard:wizard-body:password").disabled == false)
{
if (document.getElementById("wizard:wizard-body:userName").value.length == 0 ||
document.getElementById("wizard:wizard-body:password").value.length == 0 ||
document.getElementById("wizard:wizard-body:confirm").value.length == 0)
{
document.getElementById("wizard:finish-button").disabled = true;
document.getElementById("wizard:next-button").disabled = true;
}
else
{
document.getElementById("wizard:finish-button").disabled = false;
document.getElementById("wizard:next-button").disabled = false;
}
}
else
{
document.getElementById("wizard:finish-button").disabled = false;
document.getElementById("wizard:next-button").disabled = false;
}
}
function validate()
{
if (finishButtonPressed)
{
finishButtonPressed = false;
var message = (window.gecko) ? $("wizard:wizard-body:validation_invalid_character").textContent : $("wizard:wizard-body:validation_invalid_character").innerText;
return validateName(document.getElementById("wizard:wizard-body:userName"),
message,
true);
}
else
{
return true;
}
}
</script>
<h:outputText id="validation_invalid_character" style="display:none" value="#{msg.validation_invalid_character}" />
</f:verbatim>
<h:panelGrid columns="1" cellpadding="2" style="padding-top: 4px; padding-bottom: 4px;"
width="100%" rowClasses="wizardSectionHeading">
<h:outputText value="&nbsp;#{msg.user_properties}" escape="false" />
</h:panelGrid>
<h:panelGrid columns="4" cellpadding="2" cellspacing="2" width="100%">
<h:graphicImage value="/images/icons/required_field.gif" alt="#{msg.required_field}" />
<h:outputText value="#{msg.username}:"/>
<h:inputText id="userName" value="#{WizardManager.bean.userName}" size="35" maxlength="100" validator="#{LoginBean.validateUsername}" onkeyup="updateButtonState();" onchange="updateButtonState();"/>
<h:message id="errors1" for="userName" style="color:red" />
<h:graphicImage value="/images/icons/required_field.gif" alt="#{msg.required_field}" />
<h:outputText value="#{msg.password}:"/>
<h:inputSecret id="password" value="#{WizardManager.bean.password}" size="35" maxlength="100" validator="#{LoginBean.validatePassword}" onkeyup="updateButtonState();" onchange="updateButtonState();" redisplay="true" />
<h:message id="errors2" for="password" style="color:red" />
<h:graphicImage value="/images/icons/required_field.gif" alt="#{msg.required_field}" />
<h:outputText value="#{msg.confirm}:"/>
<h:inputSecret id="confirm" value="#{WizardManager.bean.confirm}" size="35" maxlength="100" validator="#{LoginBean.validatePassword}" onkeyup="updateButtonState();" onchange="updateButtonState();" redisplay="true" />
<h:message id="errors3" for="confirm" style="color:red" />
</h:panelGrid>
<h:panelGrid columns="1" cellpadding="2" style="padding-top: 4px; padding-bottom: 4px;"
width="100%" rowClasses="wizardSectionHeading">
<h:outputText value="&nbsp;#{msg.homespace}" escape="false" />
</h:panelGrid>
<h:panelGrid columns="2" cellpadding="2" cellspacing="2" width="100%">
<h:outputText value="#{msg.home_space_location}:"/>
<r:ajaxFolderSelector id="spaceSelector" label="#{msg.select_home_space_prompt}"
value="#{WizardManager.bean.homeSpaceLocation}"
initialSelection="#{NavigationBean.currentNode.nodeRefAsString}"
styleClass="selector" />
<h:outputText value="#{msg.home_space_name}:"/>
<h:inputText id="homeSpaceName" value="#{WizardManager.bean.homeSpaceName}" size="35" maxlength="1024" onkeyup="updateButtonState();" onchange="updateButtonState();" />
</h:panelGrid>