# HG changeset patch # User Sylvain Thénault # Date 1278613160 -7200 # Node ID adb87a0752818df52a03beab501a76e459fbe3d6 # Parent 6026582ae4f17f040a3df7b5f4f85ccc76f2e513 [ajax box] shouldn't give js object directly to xml_escape diff -r 6026582ae4f1 -r adb87a075281 web/box.py --- a/web/box.py Thu Jul 08 20:18:53 2010 +0200 +++ b/web/box.py Thu Jul 08 20:19:20 2010 +0200 @@ -300,10 +300,10 @@ # for each related entity, provide a link to remove the relation subview = rentity.view(self.item_vid) if maydel: - jscall = js.ajaxBoxRemoveLinkedEntity( + jscall = unicode(js.ajaxBoxRemoveLinkedEntity( self.__regid__, entity.eid, rentity.eid, self.fname_remove, - self.removed_msg and _(self.removed_msg)) + self.removed_msg and _(self.removed_msg))) w(u'[-]' '%s' % (xml_escape(jscall), subview)) @@ -317,11 +317,11 @@ req.add_css('jquery.autocomplete.css') multiple = rdef.role_cardinality(self.role) in '*+' w(u'
') - jscall = js.ajaxBoxShowSelector( + jscall = unicode(js.ajaxBoxShowSelector( self.__regid__, entity.eid, self.fname_vocabulary, self.fname_validate, self.added_msg and _(self.added_msg), _(stdmsgs.BUTTON_OK[0]), _(stdmsgs.BUTTON_CANCEL[0]), - multiple and self.separator) + multiple and self.separator)) w('%s' % ( xml_escape(jscall), multiple and _('add_relation') or _('update_relation')))