added some http-only configuration to avoid common XSS

[pizzaservice-war.git] / web / basket.xhtml

diff --git a/web/basket.xhtml b/web/basket.xhtml
index 230a89fe3b9ce202add8a279c7dd23a2a91df813..92e49ab8ea07de1d4aaa57e2a998aa4e63e01b66 100644 (file)
--- a/web/basket.xhtml
+++ b/web/basket.xhtml
@@ -9,16 +9,12 @@
        <ui:composition template="/WEB-INF/templates/guest/guest_base.tpl">
                <ui:define name="guest_title">#{msg.PAGE_TITLE_INDEX_SHOW_BASKET}</ui:define>
 
-               <ui:define name="menu">
-                       <ui:include id="menu" class="guest_menu" src="/WEB-INF/templates/guest/guest_menu.tpl" />
-               </ui:define>
-
                <ui:define name="content_header">
-                       #{msg.SUB_TITLE_INDEX_SHOW_BASKET}
+                       #{msg.CONTENT_TITLE_INDEX_SHOW_BASKET}
                </ui:define>
 
                <ui:define name="content">
-                       <h:dataTable var="item" value="#{basketController.allItems()}" headerClass="table_header_column" class="table" rendered="#{basketController.hasItems()}">
+                       <h:dataTable id="table_show_basket" var="item" value="#{basketController.allItems()}" styleClass="table" summary="#{msg.TABLE_SUMMARY_SHOW_BASKET}" rendered="#{basketController.hasItems()}">
                                <h:column>
                                        <f:facet name="header">#{msg.GUEST_ITEM_TITLE}</f:facet>
 
@@ -43,7 +39,7 @@
                                        <f:facet name="header">#{msg.CHANGE_ITEM_AMOUNT}</f:facet>
 
                                        <h:form id="add_item">
-                                               <h:commandButton class="submit" id="add" value="#{msg.BUTTON_CHANGE_ITEM_AMOUNT}" action="#{basketController.changeItem(item)}" title="#{msg.BUTTON_TITLE_CHANGE_ITEM_AMOUNT}" />
+                                               <h:commandButton class="submit" id="add" value="#{msg.BUTTON_CHANGE_ITEM_AMOUNT}" action="#{basketController.doChangeItem(item)}" title="#{msg.BUTTON_TITLE_CHANGE_ITEM_AMOUNT}" />
 
                                                <h:inputText class="input" id="amount" size="3" maxlength="20" value="#{item.orderedAmount}" title="#{msg.INPUT_TITLE_ENTER_ITEM_AMOUNT}">
                                                        <!--
@@ -71,9 +67,5 @@
                                <h:link class="checkout_link" id="checkout" value="#{msg.LINK_CONTINUE_TO_CHECKOUT}" outcome="checkout" />
                        </div>
                </ui:define>
-
-               <ui:define name="footer">
-                       <ui:include id="footer" class="guest_footer" src="/WEB-INF/templates/guest/guest_footer.tpl" />
-               </ui:define>
        </ui:composition>
 </html>