Kijin Sung
e82e3fb18c
Implement isSameOrigin() to simplify origin determination
2017-03-06 15:11:45 +09:00
Kijin Sung
14300cbcc3
Insert CSRF token into every AJAX request
2017-03-06 14:47:42 +09:00
Kijin Sung
b3fb993f73
Insert CSRF token in all AJAX requests via exec_xml(), exec_json(), exec_html()
...
일단 공식적으로 지원하는 AJAX 함수 3종에 CSRF 토큰을 삽입해 본다.
추후 체크 방식을 변경하거나 보안을 더욱 강화할 경우 X-CSRF-Token 헤더와 비교할 수도 있다.
일반 폼 제출이나 임의의 AJAX 요청에도 CSRF 토큰을 삽입하는 것은 다음 커밋에...
2017-03-06 11:51:38 +09:00
conory
699937a09e
action 없이 실행 할 수 있도록
2017-01-21 21:33:58 +09:00
conory
f930ec74f8
시스템 에러 메세지를 출력할 경우 403 HTTP 코드로 설정
2016-04-18 23:43:04 +09:00
Kijin Sung
9b5a17fb59
Clean up repeating code and add redirect() function
2016-03-07 08:34:06 +09:00
Kijin Sung
006474cb98
Fix unnecessary redirect on comment insertion in some skins
2016-03-04 15:07:03 +09:00
Kijin Sung
54fc1da600
Fix no redirect after writing a comment
2016-03-04 10:57:56 +09:00
Kijin Sung
379bed000d
Fix JSON encoding to be fully XE-compatible
2016-02-26 14:58:42 +09:00
Kijin Sung
134c6f6ec1
Fix jshint warnings and also apply patches to exec_json()
2016-02-25 15:34:02 +09:00
Kijin Sung
b94027bf1c
Display more information if an AJAX request fails
2016-02-25 14:52:07 +09:00
Kijin Sung
65517735e0
Clean up common_layout.html and merge with mobile_layout.html
2016-02-17 16:20:57 +09:00
Kijin Sung
373305ab6b
Initial implementation of debug panel on web page
2016-02-13 01:33:06 +09:00
Kijin Sung
0e25456770
Fix failure to display editor skin list
2016-02-06 22:41:55 +09:00
Kijin Sung
0c2c0d2b19
Set request method to XMLRPC if called via exec_xml()
2016-02-05 11:41:27 +09:00
Kijin Sung
f902ea8c6f
Fix regression from #152 when the server returns XML anyway
2016-02-05 10:06:51 +09:00
Kijin Sung
6eb971a290
Fix #181 script error if waiting_obj is accessed too early
2016-01-31 19:15:58 +09:00
Kijin Sung
663b70929a
Revert "Fix #54 Do you want to leave this page? message"
...
This reverts commit 8ae2dba0b9 .
2016-01-27 20:03:49 +09:00
Kijin Sung
8ae2dba0b9
Fix #54 Do you want to leave this page? message
2016-01-27 14:25:12 +09:00
Kijin Sung
4fe7a5e789
Fix excessive display of 'waiting for server response' layer
2016-01-26 22:02:20 +09:00
Kijin Sung
f7b9769428
Clean up and reorganize functions in xml_handler.js
2016-01-26 15:57:59 +09:00
Kijin Sung
c291309fad
Fix jshint error for comparison with zero
2016-01-26 10:47:59 +09:00
Kijin Sung
bd6f570027
Improve error handling and display accurate HTTP status code
2016-01-26 10:46:56 +09:00
Kijin Sung
3a419d586d
Improve backward compatibility with AXUpload5 and other third-party AJAX apps
2016-01-26 10:32:59 +09:00
Kijin Sung
8ee5e8c4b0
Make all AJAX requests use regular form submission format and JSON response format
2016-01-23 20:33:49 +09:00
izuzero
c2511530a7
XML Request에서 object 및 array child argument를 전송할 수 없는 문제 해결
2014-12-05 16:45:39 +09:00
akasima
71d97e631c
#908 attach ajax event to document element
2014-08-13 16:52:43 +09:00
akasima
eb3da2617e
#900 add error option in exec_json, exec_html
2014-08-13 11:21:03 +09:00
bnu
68517aa681
jQuery에 종속 된 exec_json()을 global에 등록.
...
* window.exec_json(action, data, callback_success, callback_error)
2013-11-30 21:37:02 +09:00
bnu
f94852935a
#60 css, js 코드 정리.
2013-11-16 20:52:46 +09:00
ngleader
dbc18a4f99
change author
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13180 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-11-07 02:42:42 +00:00
misol
f70ce644ce
Close Connection when there is no connection value.
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13161 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-09-25 15:29:32 +00:00
nagoon97
08920ced60
fixed typo
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12590 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-01-25 07:39:49 +00:00
nagoon97
08f5471854
use error code < -1000 as cusom msg
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12589 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-01-25 07:38:45 +00:00
nagoon97
d255f503b8
0.5 sec delay before blur layer show up -> 1.0 sec
...
added x_btn-primary class to the ok button on the common dialog for 'enter key' compatibility
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12585 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-01-24 09:30:57 +00:00
nagoon97
71db99a4b8
Site selector added to menu selector
...
Graphs added to dashboard
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12496 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-12-31 10:03:35 +00:00
ChanMyeong
97cc2a67dd
xml_handler.js Remove 'window.location.reload();' line 381.
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12413 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-12-17 09:36:36 +00:00
ChanMyeong
6d4f6a9168
Revert before r12361. Mistake.
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12412 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-12-17 09:32:04 +00:00
nagoon97
3fd3ca593b
Hide design/full setup items from the properties panel for shortcuts
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12393 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-12-13 09:43:22 +00:00
ChanMyeong
3111578628
Default layout bug fix.
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12361 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-12-10 05:48:22 +00:00
chschy
44b3d7a823
Show an alert popup in admin menu when the user is not logged in as an administrator
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@12113 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-11-05 02:32:15 +00:00
flyskyko
24a48d68fc
rollback r10159, r10249, r10268
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10290 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-03-02 09:18:11 +00:00
ovclas
dc453b7ffc
issue 1357 although ajax return value is success, but server return value is fail...
...
so, duplicate check varialbe should be reset.
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10249 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-02-28 09:02:47 +00:00
ovclas
89cd0aa7a7
issue 1253, 1357 when submit with procFilter, double click the submit button.
...
so, document is duplicate registered
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10159 201d5d3c-b55e-5fd7-737f-ddc643e51545
2012-02-21 07:47:36 +00:00
taggon
27a62f1a36
issue 675: display line feeds in ajax alert messages.
...
plus, make unknown error message more detail.
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@9921 201d5d3c-b55e-5fd7-737f-ddc643e51545
2011-12-08 08:25:22 +00:00
flyskyko
05bf4abe33
issue 160, fixed a bug related beforeunload event on firefox
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@9355 201d5d3c-b55e-5fd7-737f-ddc643e51545
2011-09-27 04:24:37 +00:00
devjin
7dff220d13
add beforeunload bind
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@9326 201d5d3c-b55e-5fd7-737f-ddc643e51545
2011-09-26 06:35:54 +00:00
taggon
b738c8da36
Fixed a bug for displaying waiting message
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@9292 201d5d3c-b55e-5fd7-737f-ddc643e51545
2011-09-23 02:41:22 +00:00
ChanMyeong
f990fe7211
Sitemap UI enhancement.
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@9137 201d5d3c-b55e-5fd7-737f-ddc643e51545
2011-09-09 04:53:05 +00:00
flyskyko
200b4df6f9
remove alert() when ajax error
...
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@9083 201d5d3c-b55e-5fd7-737f-ddc643e51545
2011-09-07 08:43:27 +00:00