web/views/boxes.py
branchstable
changeset 2312 af4d8f75c5db
parent 2265 4c028cb136a4
child 2443 b36f759bd2cc
equal deleted inserted replaced
2311:f178182b1305 2312:af4d8f75c5db
    14 :license: GNU Lesser General Public License, v2.1 - http://www.gnu.org/licenses
    14 :license: GNU Lesser General Public License, v2.1 - http://www.gnu.org/licenses
    15 """
    15 """
    16 __docformat__ = "restructuredtext en"
    16 __docformat__ = "restructuredtext en"
    17 _ = unicode
    17 _ = unicode
    18 
    18 
    19 from logilab.mtconverter import html_escape
    19 from logilab.mtconverter import xml_escape
    20 
    20 
    21 from cubicweb.selectors import match_user_groups, non_final_entity
    21 from cubicweb.selectors import match_user_groups, non_final_entity
    22 from cubicweb.view import EntityView
    22 from cubicweb.view import EntityView
    23 from cubicweb.schema import display_name
    23 from cubicweb.schema import display_name
    24 from cubicweb.web.htmlwidgets import BoxWidget, BoxMenu, BoxHtml, RawBoxItem
    24 from cubicweb.web.htmlwidgets import BoxWidget, BoxMenu, BoxHtml, RawBoxItem
   189         if req.form.pop('__fromsearchbox', None):
   189         if req.form.pop('__fromsearchbox', None):
   190             rql = req.form.get('rql', '')
   190             rql = req.form.get('rql', '')
   191         else:
   191         else:
   192             rql = ''
   192             rql = ''
   193         form = self.formdef % (req.build_url('view'), req.next_tabindex(),
   193         form = self.formdef % (req.build_url('view'), req.next_tabindex(),
   194                                html_escape(rql), req.next_tabindex())
   194                                xml_escape(rql), req.next_tabindex())
   195         title = u"""<span onclick="javascript: toggleVisibility('rqlinput')">%s</span>""" % req._(self.title)
   195         title = u"""<span onclick="javascript: toggleVisibility('rqlinput')">%s</span>""" % req._(self.title)
   196         box = BoxWidget(title, self.id, _class="searchBoxFrame", islist=False, escape=False)
   196         box = BoxWidget(title, self.id, _class="searchBoxFrame", islist=False, escape=False)
   197         box.append(BoxHtml(form))
   197         box.append(BoxHtml(form))
   198         box.render(self.w)
   198         box.render(self.w)
   199 
   199