Mercurial > p > roundup > code
annotate share/roundup/templates/devel/html/msg.item.html @ 8566:e4191aa7b402 default tip
doc: issue2551415 correct doc for change input->input_payload
in 2.5 the rest interface changed a variable name from input to
input_payload. An earlier commit changed the rest docs. This commit
adds an item for it to the upgrading 2.4.0->2.5.0 section. Also cross
reference added to the rest docs with the updated examples.
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Thu, 09 Apr 2026 00:19:06 -0400 |
| parents | 4ac0bbb3e440 |
| children |
| rev | line source |
|---|---|
| 4434 | 1 <tal:block metal:use-macro="templates/page/macros/frame"> |
| 2 <title metal:fill-slot="head_title"> | |
| 3 <tal:block condition="context/id" i18n:translate="" | |
|
8365
4ac0bbb3e440
bug(security): CVE-2025-53865 - XSS bug
John Rouillard <rouilj@ieee.org>
parents:
5207
diff
changeset
|
4 >Message <tal:x tal:content="context/id" i18n:name="id" |
| 4434 | 5 /> - <span tal:replace="config/TRACKER_NAME" i18n:name="tracker" |
| 6 /></tal:block> | |
| 7 <tal:block condition="not:context/id" i18n:translate="" | |
| 8 >New Message - <span tal:replace="config/TRACKER_NAME" i18n:name="tracker" | |
| 9 /></tal:block> | |
| 10 </title> | |
| 11 <tal:block metal:fill-slot="body_title"> | |
| 12 <span tal:condition="python: not (context.id or context.is_edit_ok())" | |
| 13 tal:omit-tag="python:1" i18n:translate="">New Message</span> | |
| 14 <span tal:condition="python: not context.id and context.is_edit_ok()" | |
| 15 tal:omit-tag="python:1" i18n:translate="">New Message Editing</span> | |
| 16 <span tal:condition="python: context.id and not context.is_edit_ok()" | |
| 17 tal:omit-tag="python:1" i18n:translate="">Message<tal:x | |
| 18 replace="context/id" i18n:name="id" /></span> | |
| 19 <span tal:condition="python: context.id and context.is_edit_ok()" | |
| 20 tal:omit-tag="python:1" i18n:translate="">Message<tal:x | |
| 21 replace="context/id" i18n:name="id" /> Editing</span> | |
| 22 </tal:block> | |
| 23 <td class="content" metal:fill-slot="content"> | |
| 24 | |
| 25 <p tal:condition="python:not (context.is_view_ok() | |
| 26 or request.user.hasRole('Anonymous'))" i18n:translate=""> | |
| 27 You are not allowed to view this page.</p> | |
| 28 | |
| 29 <p tal:condition="python:not context.is_view_ok() | |
| 30 and request.user.hasRole('Anonymous')" i18n:translate=""> | |
| 31 Please login with your username and password.</p> | |
| 32 | |
| 33 <div tal:condition="context/is_view_ok"> | |
| 34 <table class="form"> | |
| 35 | |
| 36 <tr> | |
| 37 <th i18n:translate="">Author</th> | |
| 38 <td tal:content="context/author"></td> | |
| 39 </tr> | |
| 40 | |
| 41 <tr> | |
| 42 <th i18n:translate="">Recipients</th> | |
| 43 <td tal:content="context/recipients"></td> | |
| 44 </tr> | |
| 45 | |
| 46 <tr> | |
| 47 <th i18n:translate="">Date</th> | |
| 48 <td tal:content="context/date"></td> | |
| 49 </tr> | |
| 50 | |
| 51 <tr> | |
| 52 <th i18n:translate="">Message-id</th> | |
| 53 <td tal:content="context/messageid"></td> | |
| 54 </tr> | |
| 55 | |
| 56 <tr> | |
| 57 <th i18n:translate="">In-reply-to</th> | |
| 58 <td tal:content="context/inreplyto"></td> | |
| 59 </tr> | |
| 60 | |
| 61 </table> | |
| 62 | |
| 63 <!--<p tal:condition="python:utils.sb_is_spam(context)" class="error-message"> | |
| 64 Message has been classified as spam</p>--> | |
| 65 | |
| 66 <table class="messages"> | |
| 67 | |
| 68 <!-- <tr> | |
| 69 <th class="header" i18n:translate="">Content</th> | |
| 70 <th class="header" | |
| 71 tal:condition="python:request.user.hasPermission('SB: May Classify')"> | |
| 72 <form method="POST" onSubmit="return submit_once()" | |
| 73 enctype="multipart/form-data" | |
| 74 tal:attributes="action context/designator"> | |
| 75 | |
|
5207
4a157824f933
changes to try to deploy anti-csrf defense to other templates.
John Rouillard <rouilj@ieee.org>
parents:
4434
diff
changeset
|
76 <input name="@csrf" type="hidden" |
|
4a157824f933
changes to try to deploy anti-csrf defense to other templates.
John Rouillard <rouilj@ieee.org>
parents:
4434
diff
changeset
|
77 tal:attributes="value python:utils.anti_csrf_nonce()"> |
| 4434 | 78 <input type="hidden" name="@action" value="spambayes_classify"> |
| 79 <input type="submit" name="trainspam" value="Mark as SPAM" i18n:attributes="value"> | |
| 80 <input type="submit" name="trainham" value="Mark as HAM (not SPAM)" i18n:attributes="value"> | |
| 81 </form> | |
| 82 </th> | |
| 83 | |
| 84 </tr>--> | |
| 85 | |
| 86 <tr> | |
| 87 <td class="content" colspan="2" | |
| 88 tal:condition="python:context.content.is_view_ok()"> | |
| 89 <pre | |
| 90 tal:content="structure python:utils.localReplace(context.content.hyperlinked())"></pre></td> | |
| 91 <td class="content" colspan="2" | |
| 92 tal:condition="python:not context.content.is_view_ok()"> | |
| 93 You are not authorized to see this message. | |
| 94 <!-- Message has been classified as spam and is therefore not | |
| 95 available to unathorized users. If you think this is | |
| 96 incorrect, please login and report the message as being | |
| 97 misclassified. --> | |
| 98 </td> | |
| 99 </tr> | |
| 100 </table> | |
| 101 | |
| 102 <table class="files" tal:condition="context/files"> | |
| 103 <tr><th colspan="2" class="header" i18n:translate="">Files</th></tr> | |
| 104 <tr> | |
| 105 <th i18n:translate="">File name</th> | |
| 106 <th i18n:translate="">Uploaded</th> | |
| 107 </tr> | |
| 108 <tr tal:repeat="file context/files"> | |
| 109 <td> | |
| 110 <a tal:attributes="href string:file${file/id}/${file/name}" | |
| 111 tal:content="file/name">dld link</a> | |
| 112 </td> | |
| 113 <td> | |
| 114 <span tal:content="file/creator">creator's name</span>, | |
| 115 <span tal:content="file/creation">creation date</span> | |
| 116 </td> | |
| 117 </tr> | |
| 118 </table> | |
| 119 | |
| 120 <tal:block tal:replace="structure context/history" /> | |
| 121 | |
| 122 </div> | |
| 123 </td> | |
| 124 | |
| 125 </tal:block> |