Changes for page Default Class Sheet

Summary

• Page properties (1 modified, 0 added, 0 removed)

Details

Page properties

Content

...	...	@@ -62,6 +62,7 @@
62	62	{{html}}
63	63	<form action="" id="newdoc" method="post">
64	64	<div>
	65	+ <input type="hidden" name="form_token" value="$!{services.csrf.getToken()}" />
65	65	<input type="hidden" name="parent" value="${defaultParent}"/>
66	66	<input type="hidden" name="template" value="${classTemplateDoc}"/>
67	67	<input type="hidden" name="sheet" value="1"/>
...	...	@@ -91,6 +91,7 @@
91	91	{{html}}
92	92	<form action="$classSheetDoc.getURL('save', 'editor=wiki')" method="post">
93	93	<div>
	95	+ <input type="hidden" name="form_token" value="$!{services.csrf.getToken()}" />
94	94	<input type="hidden" name="parent" value="${doc.fullName}"/>
95	95	<input type="hidden" name="xredirect" value="${doc.URL}"/>
96	96	<input type="hidden" name="content" value="$xwiki.getFormEncoded($xwiki.getDocument('XWiki.ObjectSheet').getContent().replaceAll('XWiki.MyClass', $doc.fullName))"/>
...	...	@@ -101,7 +101,7 @@
101	101	#else
102	102	#if($classSheetExists && !$classSheetDoc.getObject('XWiki.SheetClass'))
103	103	#set($xredirect = $request.getRequestURL())
104		- #set($createUrl = $classSheetDoc.getURL('objectadd', "classname=XWiki.SheetClass&xredirect=${xredirect}"))
	106	+ #set($createUrl = $classSheetDoc.getURL('objectadd', "classname=XWiki.SheetClass&xredirect=${xredirect}&form_token=$!{services.csrf.getToken()}"))
105	105	{{warning}}
106	106	The sheet does not contain an object of type //XWiki.SheetClass//. To trigger the inline edit mode automatically, {{html}}<a href="$createUrl">add a SheetClass object to the sheet »</a>.{{/html}}
107	107	{{/warning}}
...	...	@@ -118,6 +118,7 @@
118	118	{{html}}
119	119	<form action="$classTemplateDoc.getURL('save', 'editor=wiki')" method="post">
120	120	<div>
	123	+ <input type="hidden" name="form_token" value="$!{services.csrf.getToken()}" />
121	121	<input type="hidden" name="parent" value="${doc.fullName}"/>
122	122	<input type="hidden" name="xredirect" value="${doc.URL}"/>
123	123	<input type="hidden" name="content" value="$xwiki.getFormEncoded($xwiki.getDocument('XWiki.ObjectTemplate').getContent().replaceAll('XWiki.MySheet', $classSheetDoc.fullName))"/>
...	...	@@ -128,7 +128,7 @@
128	128	#else
129	129	#if($classTemplateExists && !$classTemplateDoc.getObject(${doc.fullName}))
130	130	#set($xredirect = $request.getRequestURL())
131		- #set($createUrl = $classTemplateDoc.getURL('objectadd', "classname=${doc.fullName}&amp;xredirect=${xredirect}"))
	134	+ #set($createUrl = $classTemplateDoc.getURL('objectadd', "classname=${doc.fullName}&amp;xredirect=${xredirect}&amp;form_token=$!{services.csrf.getToken()}"))
132	132	{{warning}}
133	133	The template does not contain an object of type //${className}Class//. {{html}}<a href="$createUrl">Add a ${className} object to the template »</a>.{{/html}}
134	134	{{/warning}}
...	...	@@ -135,7 +135,7 @@
135	135
136	136	#end
137	137	[[View the template document (${classTemplateDoc.fullName}) »>>${classTemplateDoc.fullName}]]
138		-
139	139	#end
	142	+
140	140	#end ## doc == XWiki.ClassSheet
141	141	{{/velocity}}