LimeSurvey: 3.x-LTS aec15abd

Diff Back to Repository
Author Committer Branch Timestamp Parent
gabrieljenik GitHub 3.x-LTS 2021-09-17 11:02:19 3.x-LTS 15a399ea
Affected Issues  16792: Delete permission on Survey : no CRSF control
Changeset

Fixed issue #16792: Delete permission on Survey : no CRSF control (#1967)

  • Added 'send post' feature to ConfirmationModal: if element has 'data-post-url' attribute, window.LS.sendPost() is used.
  • Places where ConfirmationModal was used with 'data-href' were updated to use 'data-post-url':
    surveypermission.php
    SurveysGroups.php
    SurveyTimingDynamic.php
    viewquotas_quota_actions.php
    manage_key.php
  • ParticipantShare.php was using $.ajax() with 'GET' method. It was changed to use 'POST'.
  • The respective controller actions where updated to require a POST request.

Co-authored-by: encuestabizdevgit <devgit@encuesta.biz>
mod - application/controllers/admin/SurveysGroupsController.php Diff File
mod - application/controllers/admin/dataentry.php Diff File
mod - application/controllers/admin/participantsaction.php Diff File
mod - application/controllers/admin/quotas.php Diff File
mod - application/controllers/admin/surveypermission.php Diff File
mod - application/controllers/admin/update.php Diff File
mod - application/core/Survey_Common_Action.php Diff File
mod - application/models/SurveyTimingDynamic.php Diff File
mod - application/models/SurveysGroups.php Diff File
mod - application/views/admin/quotas/viewquotas_quota_actions.php Diff File
mod - application/views/admin/update/manage/manage_key.php Diff File
mod - assets/packages/adminbasics/build/adminbasics.css Diff File
mod - assets/packages/adminbasics/build/adminbasics.js Diff File
mod - assets/packages/adminbasics/build/adminbasics.min.css Diff File
mod - assets/packages/adminbasics/build/adminbasics.min.js Diff File
mod - assets/packages/adminbasics/build/adminbasics.rtl.css Diff File
mod - assets/packages/adminbasics/build/adminbasics.rtl.min.css Diff File
mod - assets/packages/adminbasics/src/parts/confirmationModal.js Diff File
mod - assets/scripts/admin/participantpanel.js Diff File