Changeset 30529 for main/trunk/greenstone2/macros/extlink.dm

Timestamp:

2016-05-12T16:48:10+12:00 (8 years ago)

Author:

ak19

Message:

Implementing Dr Bainbridge's solution to fix the external link I'd broken in order to make external links safe/secure from XSS.

File:

• main/trunk/greenstone2/macros/extlink.dm (modified) (1 diff)

main/trunk/greenstone2/macros/extlink.dm

@@ -1 +1 @@
 # this file must be UTF-8 encoded
 
+# If there are external links, call this function
+_extlinkscript_ {
+
+function follow_escaped_link (event, the_url) \{
+  //http://stackoverflow.com/questions/8614438/preventdefault-inside-onclick-attribute-of-a-tag
+  event.preventDefault();  
+
+  //http://stackoverflow.com/questions/747641/what-is-the-difference-between-decodeuricomponent-and-decodeuri
+  the_url = decodeURIComponent(the_url);
+  var lastIndex = the_url.lastIndexOf("http://");
+  if(the_url.indexOf("http://") !== lastIndex) \{
+    the_url = the_url.substring(lastIndex);
+  \}
+  location.href = the_url;
+  
+\}
+
+}
+
 package extlink
+
+# override this to include _extlinkscript_
+_globalscripts_{
+<script language="javascript" type="text/javascript">
+_extlinkscript_
+</script>
+
+}
 
 _header_ {_htmlhead_}