added some http-only configuration to avoid common XSS

[pizzaservice-war.git] / web / basket.xhtml

diff --git a/web/basket.xhtml b/web/basket.xhtml
index 3d3fb58f7419eb1d5704e8af221a667fc55ca1e4..92e49ab8ea07de1d4aaa57e2a998aa4e63e01b66 100644 (file)
--- a/web/basket.xhtml
+++ b/web/basket.xhtml
@@ -39,7 +39,7 @@
                                        <f:facet name="header">#{msg.CHANGE_ITEM_AMOUNT}</f:facet>
 
                                        <h:form id="add_item">
-                                               <h:commandButton class="submit" id="add" value="#{msg.BUTTON_CHANGE_ITEM_AMOUNT}" action="#{basketController.changeItem(item)}" title="#{msg.BUTTON_TITLE_CHANGE_ITEM_AMOUNT}" />
+                                               <h:commandButton class="submit" id="add" value="#{msg.BUTTON_CHANGE_ITEM_AMOUNT}" action="#{basketController.doChangeItem(item)}" title="#{msg.BUTTON_TITLE_CHANGE_ITEM_AMOUNT}" />
 
                                                <h:inputText class="input" id="amount" size="3" maxlength="20" value="#{item.orderedAmount}" title="#{msg.INPUT_TITLE_ENTER_ITEM_AMOUNT}">
                                                        <!--