Changeset 2452 for package_branches/invirt-web/cherrypy/code

Timestamp:

Aug 21, 2009, 12:13:44 PM (15 years ago)

Author:

ecprice

Message:

disable GETting to post keyboards to ajaxterm

Location:

package_branches/invirt-web/cherrypy/code

Files:

• main.py (modified) (1 diff)
• static/ajaxterm/ajaxterm.js (modified) (6 diffs)

package_branches/invirt-web/cherrypy/code/main.py

@@ -303 +303 @@
 
         @cherrypy.expose
+        @cherrypy.tools.require_POST()
         @cherrypy.tools.gzip()
         def at(self, machine_id, k=None, c=0, force=0):

package_branches/invirt-web/cherrypy/code/static/ajaxterm/ajaxterm.js

@@ -18 +18 @@
         var dstat=document.createElement('pre');
         var sled=document.createElement('span');
-        var opt_get=document.createElement('a');
         var opt_color=document.createElement('a');
         var opt_paste=document.createElement('a');
@@ -36 +35 @@
                 dstat.appendChild(opt);
                 dstat.appendChild(document.createTextNode(' '));
-        }
-        function do_get(event) {
-                opt_get.className=(opt_get.className=='off')?'on':'off';
-                debug('GET '+opt_get.className);
         }
         function do_color(event) {
@@ -108 +103 @@
                             force=false;
                         }
-                        if(opt_get.className=='on') {
-                                r.open("GET",base_path+"?"+query,true);
-                                if(ie) {
-                                        r.setRequestHeader("If-Modified-Since", "Sat, 1 Jan 2000 00:00:00 GMT");
-                                }
-                        } else {
-                                r.open("POST",base_path,true);
-                        }
+                        r.open("POST",base_path,true);
                         r.setRequestHeader('Content-Type','application/x-www-form-urlencoded');
                         r.onreadystatechange = function () {
@@ -146 +134 @@
                         }
                         error_timeout=window.setTimeout(error,5000);
-                        if(opt_get.className=='on') {
-                                r.send(null);
-                        } else {
-                                r.send(query);
-                        }
+                        r.send(query);
                 }
         }
@@ -258 +242 @@
                 opt_add(opt_color,'Colors');
                 opt_color.className='on';
-                opt_add(opt_get,'GET');
                 opt_add(opt_paste,'Paste');
                 dstat.appendChild(sdebug);
@@ -265 +248 @@
                 div.appendChild(dterm);
                 if(opt_color.addEventListener) {
-                        opt_get.addEventListener('click',do_get,true);
                         opt_color.addEventListener('click',do_color,true);
                         opt_paste.addEventListener('click',do_paste,true);
                 } else {
-                        opt_get.attachEvent("onclick", do_get);
                         opt_color.attachEvent("onclick", do_color);
                         opt_paste.attachEvent("onclick", do_paste);