From 568fc3309075ee9ba473b5dc8a3f31c43f83424a Mon Sep 17 00:00:00 2001
From: Alex Orluc <alex.orluc@maarch.org>
Date: Tue, 2 Aug 2016 16:25:19 +0000
Subject: [PATCH] FEAT #4465 add url security
---
visa/trunk/xml/IVS/requests_definitions.xml | 9 +++++++++
visa/trunk/xml/IVS/validation_rules.xml | 15 +++++++++++++++
2 files changed, 24 insertions(+)
diff --git a/visa/trunk/xml/IVS/requests_definitions.xml b/visa/trunk/xml/IVS/requests_definitions.xml
index e58b444cfcb..58c7c29cbb3 100755
--- a/visa/trunk/xml/IVS/requests_definitions.xml
+++ b/visa/trunk/xml/IVS/requests_definitions.xml
@@ -47,10 +47,19 @@
<parameter name="page" value="saveVisaModel"/>
<parameter name="module" value="visa"/>
</requestDefinition>
+ <requestDefinition method="GET" path="/apps/maarch_entreprise/index.php" validationRule="vi_getVisaModelByTitle" >
+ <parameter name="display" value="true"/>
+ <parameter name="module" value="visa"/>
+ <parameter name="page" value="getVisaModelByTitle"/>
+ </requestDefinition>
<requestDefinition method="POST" path="/apps/maarch_entreprise/index.php" validationRule="vi_saveVisaWF" >
<parameter name="page" value="saveVisaWF"/>
<parameter name="module" value="visa"/>
</requestDefinition>
+ <requestDefinition method="POST" path="/apps/maarch_entreprise/index.php" validationRule="vi_resetVisaWF" >
+ <parameter name="page" value="resetVisaWF"/>
+ <parameter name="module" value="visa"/>
+ </requestDefinition>
<requestDefinition method="GET" path="/apps/maarch_entreprise/index.php" validationRule="vi_saveVisaWF" >
<parameter name="page" value="saveVisaWF"/>
<parameter name="module" value="visa"/>
diff --git a/visa/trunk/xml/IVS/validation_rules.xml b/visa/trunk/xml/IVS/validation_rules.xml
index e565e9e4479..42c9b6b390a 100755
--- a/visa/trunk/xml/IVS/validation_rules.xml
+++ b/visa/trunk/xml/IVS/validation_rules.xml
@@ -35,6 +35,9 @@
<parameter name="objectType" type="identifier" />
<parameter name="objectId" type="identifier" />
</validationRule>
+ <validationRule name="vi_getVisaModelByTitle" extends="standardForm" mode="error">
+ <parameter name="title" type="string" />
+ </validationRule>
<validationRule name="vi_saveVisaModel" extends="standardForm" mode="error">
<parameter name="id_list" type="string" />
<parameter name="title" type="string" />
@@ -54,6 +57,18 @@
<parameter name="fromDetail" type="YN" />
<parameter name="cons_empty" type="boolean" />
</validationRule>
+ <validationRule name="vi_resetVisaWF" extends="standardForm" mode="error">
+ <parameter name="res_id" type="integer" />
+ <parameter name="coll_id" type="collection_list" />
+ <parameter name="dates" type="string" />
+ <parameter name="id_list" type="string" />
+ <parameter name="title" type="string" />
+ <parameter name="conseillers" type="string" />
+ <parameter name="consignes" type="string" />
+ <parameter name="list_sign" type="string" />
+ <parameter name="fromDetail" type="YN" />
+ <parameter name="cons_empty" type="boolean" />
+ </validationRule>
<validationRule name="vi_sign_ans" extends="standardForm" mode="error">
<parameter name="id" type="string" />
<parameter name="collId" type="collection_list" />
--
GitLab