From 75a907eeabb2983bda2bd1081eacb8a7d94db63b Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Mon, 24 Nov 2014 09:34:46 -0500 Subject: [PATCH] Add .bat and .cmd to the pretty print extensions --- src/main/java/com/gitblit/wicket/pages/BasePage.java | 53 +++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 files changed, 53 insertions(+), 0 deletions(-) diff --git a/src/main/java/com/gitblit/wicket/pages/BasePage.java b/src/main/java/com/gitblit/wicket/pages/BasePage.java index 4971039..fbe5861 100644 --- a/src/main/java/com/gitblit/wicket/pages/BasePage.java +++ b/src/main/java/com/gitblit/wicket/pages/BasePage.java @@ -35,6 +35,7 @@ import org.apache.commons.io.IOUtils; import org.apache.wicket.Application; +import org.apache.wicket.Component; import org.apache.wicket.Page; import org.apache.wicket.PageParameters; import org.apache.wicket.RedirectToUrlException; @@ -42,9 +43,12 @@ import org.apache.wicket.markup.html.basic.Label; import org.apache.wicket.markup.html.link.ExternalLink; import org.apache.wicket.markup.html.panel.FeedbackPanel; +import org.apache.wicket.markup.html.resources.JavascriptResourceReference; +import org.apache.wicket.markup.repeater.RepeatingView; import org.apache.wicket.protocol.http.RequestUtils; import org.apache.wicket.protocol.http.WebResponse; import org.apache.wicket.protocol.http.servlet.ServletWebRequest; +import org.apache.wicket.request.target.basic.RedirectRequestTarget; import org.apache.wicket.util.time.Duration; import org.apache.wicket.util.time.Time; import org.slf4j.Logger; @@ -74,11 +78,13 @@ public BasePage() { super(); + add(new RepeatingView("bottomScripts").setRenderBodyOnly(true)); customizeHeader(); } public BasePage(PageParameters params) { super(params); + add(new RepeatingView("bottomScripts").setRenderBodyOnly(true)); customizeHeader(); } @@ -110,6 +116,15 @@ String relativeUrl = urlFor(clazz, params).toString(); String canonicalUrl = RequestUtils.toAbsolutePath(relativeUrl); return canonicalUrl; + } + + protected void redirectTo(Class<? extends BasePage> pageClass) { + redirectTo(pageClass, null); + } + + protected void redirectTo(Class<? extends BasePage> pageClass, PageParameters parameters) { + String absoluteUrl = getCanonicalUrl(pageClass, parameters); + getRequestCycle().setRequestTarget(new RedirectRequestTarget(absoluteUrl)); } protected String getLanguageCode() { @@ -166,6 +181,9 @@ // use default Wicket caching behavior super.setHeaders(response); } + + // XRF vulnerability. issue-500 / ticket-166 + response.setHeader("X-Frame-Options", "SAMEORIGIN"); } /** @@ -492,4 +510,39 @@ } return sb.toString(); } + + /** + * Adds a HTML script element loading the javascript designated by the given path. + * + * @param scriptPath + * page-relative path to the Javascript resource; normally starts with "scripts/" + */ + protected void addBottomScript(String scriptPath) { + Component bottomScriptContainer = get("bottomScripts"); + if (bottomScriptContainer instanceof RepeatingView) { + // Always true. + RepeatingView bottomScripts = (RepeatingView) bottomScriptContainer; + Label script = new Label(bottomScripts.newChildId(), "<script type='text/javascript' src='" + + urlFor(new JavascriptResourceReference(this.getClass(), scriptPath)) + "'></script>\n"); + bottomScripts.add(script.setEscapeModelStrings(false).setRenderBodyOnly(true)); + } + } + + /** + * Adds a HTML script element containing the given code. + * + * @param code + * inline script code + */ + protected void addBottomScriptInline(String code) { + Component bottomScriptContainer = get("bottomScripts"); + if (bottomScriptContainer instanceof RepeatingView) { + // Always true. + RepeatingView bottomScripts = (RepeatingView) bottomScriptContainer; + Label script = new Label(bottomScripts.newChildId(), + "<script type='text/javascript'>/*<![CDATA[*/\n" + code + "\n//]]>\n</script>\n"); + bottomScripts.add(script.setEscapeModelStrings(false).setRenderBodyOnly(true)); + } + } + } -- Gitblit v1.9.1