lsm/Orchard
1
0
Fork 0
mirror of https://github.com/OrchardCMS/Orchard.git synced 2026-02-09 09:16:41 +08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Securing json endpoint for tags

Browse Source 
--HG--
branch : 1.x
This commit is contained in:
Sebastien Ros
2011-11-02 15:34:01 -07:00
parent a1d749423e
commit cad9138ac4
3 changed files with 11 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/Orchard.Web/Modules/Orchard.Tags/Controllers/AdminController.cs
View File

@@ -124,6 +124,16 @@ namespace Orchard.Tags.Controllers {
return this.RedirectLocal(returnUrl, () => RedirectToAction("Index"));
}
public JsonResult FetchSimilarTags(string snippet) {
if (!Services.Authorizer.Authorize(Permissions.ManageTags, T("Not authorized to fetch tags")))
return Json(null);
return Json(
_tagService.GetTagsByNameSnippet(snippet).Select(tag => tag.TagName).ToList(),
JsonRequestBehavior.AllowGet
);
}
private static TagEntry CreateTagEntry(TagRecord tagRecord) {
return new TagEntry {
Tag = tagRecord,

7
src/Orchard.Web/Modules/Orchard.Tags/Controllers/HomeController.cs
View File

@@ -63,12 +63,5 @@ namespace Orchard.Tags.Controllers {
return View(viewModel);
}
public JsonResult FetchSimilarTags(string snippet) {
return Json(
_tagService.GetTagsByNameSnippet(snippet).Select(tag => tag.TagName).ToList(),
JsonRequestBehavior.AllowGet
);
}
}
}

2
src/Orchard.Web/Modules/Orchard.Tags/Views/EditorTemplates/Parts/Tags.cshtml
View File

@@ -16,7 +16,7 @@
$(function () {
$.tagsAutocomplete.autocomplete(
'@Html.FieldIdFor(m => m.Tags)',
'@Url.Action("FetchSimilarTags", new { Controller = "Home", Area = "Orchard.Tags" })', 1);
'@Url.Action("FetchSimilarTags", new { Controller = "Admin", Area = "Orchard.Tags" })', 1);
});
//]]>
</script>