Changes for page LiveTable View Sheet
Last modified by Сергей Коршунов on 2025/05/01 21:19
From version 3.1
edited by Сергей Коршунов
on 2022/10/05 21:06
on 2022/10/05 21:06
Change comment:
Install extension [org.xwiki.platform:xwiki-platform-appwithinminutes-ui/14.8]
To version 4.1
edited by Сергей Коршунов
on 2023/01/17 14:14
on 2023/01/17 14:14
Change comment:
Install extension [org.xwiki.platform:xwiki-platform-appwithinminutes-ui/14.10.3]
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -11,16 +11,8 @@ 11 11 ## Display the live table only if it was generated. 12 12 #if ($doc.content.length() > 0) 13 13 = $services.localization.render('platform.appwithinminutes.appLiveTableHeading') = 14 - ## We don't use the Include macro (with empty reference) because we want the content to be executed with the rights 15 - ## of the current document rather than the rights of the sheet. This is important because the user can modify the 16 - ## content of the application home page which means we could execute untrusted content with the rights of the sheet. 17 - ## Ideally we should use the Display macro with a parameter to disable the sheet, but we don't have this parameter. 18 - ## We don't clean the HTML content because getRenderedContent() should produce clean HTML, unless the user has 19 - ## disabled the HTML cleaning, in which case he will get what he asked for. Note that one good reason to disable 20 - ## HTML cleaning is to preserve the whitespaces in the attribute values. 21 - ## Escape {{ in the rendered content to be sure that the HTML macro is not closed unintentionally. 22 - {{html clean="false"}}$doc.getRenderedContent($doc.content, 23 - $doc.syntax.toIdString()).replace('{{', '{{'){{/html}} 14 + 15 + {{include reference="" author="target"/}} 24 24 #end 25 25 #end 26 26