MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

fix: Added child-protection for the mass select on the event index 

- only site admins can mass select + delete now.
pull/2242/head
iglocska 2017-06-01 16:07:35 +02:00
parent b0ae887a24
commit 9f39907984
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
app/View/Events/index.ctp
View File

@ -28,7 +28,13 @@
<div class="tabMenuFixedContainer" style="display:inline-block;">
<span class="tabMenuFixed tabMenuFixed<?php echo $tab; ?> tabMenuSides">
<span role="button" tabindex="0" aria-label="Modify filters" id="create-button" title="Modify filters" class="icon-search useCursorPointer" title="Filter events" role="button" tabindex="0" aria-label="Filter events" onClick="getPopup('<?php echo h($urlparams);?>', 'events', 'filterEventIndex');"></span>
<span id="multi-delete-button" title="Delete selected Events" role="button" tabindex="0" aria-label="Delete selected Events" class="hidden icon-trash mass-select useCursorPointer" onClick="multiSelectDeleteEvents();"></span>
<?php
if ($isSiteAdmin):
?>
<span id="multi-delete-button" title="Delete selected Events" role="button" tabindex="0" aria-label="Delete selected Events" class="hidden icon-trash mass-select useCursorPointer" onClick="multiSelectDeleteEvents();"></span>
<?php
endif;
?>
</span>
<?php
if ($filtered):