From ca01e25772730cab0117bca0e514140e6c5f67d1 Mon Sep 17 00:00:00 2001
From: Aleksander Machniak <alec@alec.pl>
Date: Sat, 05 Jul 2014 06:33:03 -0400
Subject: [PATCH] Fix security issue in delete-response action - allow only ajax request. Unify code for identities and responses deletion.
---
plugins/jqueryui/js/jquery-ui-accessible-datepicker.js | 7 ++++---
1 files changed, 4 insertions(+), 3 deletions(-)
diff --git a/plugins/jqueryui/js/jquery-ui-accessible-datepicker.js b/plugins/jqueryui/js/jquery-ui-accessible-datepicker.js
index ae6ba37..287c8f5 100644
--- a/plugins/jqueryui/js/jquery-ui-accessible-datepicker.js
+++ b/plugins/jqueryui/js/jquery-ui-accessible-datepicker.js
@@ -74,13 +74,14 @@
.attr('aria-labelledby', inst.id + '-dp-title');
}
else {
- inst.dpDiv.attr('id', inst.id + '-dp-widget')
+ var widgetId = inst.dpDiv.attr('id') || inst.id + '-dp-widget';
+ inst.dpDiv.attr('id', widgetId)
.attr('aria-hidden', 'true')
.attr('aria-labelledby', inst.id + '-dp-title');
$(inst.input).attr('aria-haspopup', 'true')
.attr('aria-expanded', 'false')
- .attr('aria-owns', inst.id + '-dp-widget');
+ .attr('aria-owns', widgetId);
}
return inst;
@@ -93,7 +94,7 @@
var that = this;
// register additional keyboard events to control date selection with cursor keys
- $(target).bind('keyup', function(event) {
+ $(target).unbind('keyup.datepicker-extended').bind('keyup.datepicker-extended', function(event) {
var inc = 1;
switch (event.keyCode) {
case 109:
--
Gitblit v1.9.1