| ... |
... |
@@ -175,10 +175,8 @@ |
| 175 |
175 |
(% class="gallery_actions" %)((( |
| 176 |
176 |
#foreach ($action in $actions) |
| 177 |
177 |
#set( $actionname = $services.localization.render("${translationPrefix}.actions.${action.name}") ) |
| 178 |
|
- ## Escape the URL so that it cannot break out of the link syntax, whatever its origin. |
| 179 |
|
- #set ($actionURL = $services.rendering.escape($action.url, 'xwiki/2.1')) |
| 180 |
180 |
[[${services.icon.render($action.icon)}(% class="sr-only"%)${actionname}(%%)>>## |
| 181 |
|
- path:${actionURL}||class="tool ${action.name} $!{action.extraCssClass}"## |
|
179 |
+ path:${action.url}||class="tool ${action.name} $!{action.extraCssClass}"## |
| 182 |
182 |
title="${actionname}" #if($action.rel) rel="${action.rel}"#end]]## |
| 183 |
183 |
#end |
| 184 |
184 |
$!additionalContent |
| ... |
... |
@@ -270,10 +270,7 @@ |
| 270 |
270 |
#_attachmentPicker_displayStartFrame({'cssClass' : "gallery_emptyChoice $!{dcssClass}", 'text' : $services.localization.render("${translationPrefix}.default"), 'value' : "${options.defaultValue}"} $currentValue) |
| 271 |
271 |
#_attachmentPicker_displayAttachmentDetails($defaultAttachment $options) |
| 272 |
272 |
#set ($returnURL = $escapetool.url($doc.getURL('view', $request.queryString))) |
| 273 |
|
- #set ($selectURL = $targetDocument.getURL(${options.get('docAction')}, $escapetool.url({ |
| 274 |
|
- "${options.get('classname')}_${options.get('object')}_${options.get('property')}": '', |
| 275 |
|
- 'form_token': $!{services.csrf.getToken()} |
| 276 |
|
- }))) |
|
271 |
+ #set ($selectURL = $targetDocument.getURL(${options.get('docAction')}, "${options.get('classname')}_${options.get('object')}_${options.get('property')}=&form_token=$!{services.csrf.getToken()}")) |
| 277 |
277 |
#_attachmentPicker_displayEndFrame ([{'name' : 'select', 'url' : $selectURL, 'icon' : 'check', 'extraCssClass' : 'btn btn-xs btn-success'}]) |
| 278 |
278 |
#end |
| 279 |
279 |
{{/velocity}} |
