added some http-only configuration to avoid common XSS

[pizzaservice-war.git] / web / customer / lost_passwd.xhtml

diff --git a/web/customer/lost_passwd.xhtml b/web/customer/lost_passwd.xhtml
index ea81485f5e7a50b58923a22a9e70e9f584ac1e6b..cda9f20b07258bb36ee0fb92b8cd9757511be07b 100644 (file)
--- a/web/customer/lost_passwd.xhtml
+++ b/web/customer/lost_passwd.xhtml
@@ -7,14 +7,14 @@
          >
 
        <ui:composition template="/WEB-INF/templates/guest/guest_base.tpl">
-               <ui:define name="guest_title">#{msg.PAGE_TITLE_CUSTOMER_LOST_PASSWORD}</ui:define>
+               <ui:define name="guest_title">#{msg.PAGE_TITLE_USER_LOST_PASSWORD}</ui:define>
 
                <ui:define name="content_header">
-                       #{msg.CONTENT_TITLE_CUSTOMER_LOST_PASSWORD}
+                       #{msg.CONTENT_TITLE_USER_LOST_PASSWORD}
                </ui:define>
 
                <ui:define name="content">
-                       <div class="para" id="customer_lost_password_content">
+                       <div class="para" id="user_lost_password_content">
                                <h:form id="lost_password_form">
                                        <div class="table">
                                                <div class="table_header">
@@ -26,11 +26,11 @@
 
                                                        <div class="table_row">
                                                                <div class="table_left">
-                                                                       <h:outputLabel for="id" value="#{msg.ENTER_CUSTOMER_NUMBER}" />
+                                                                       <h:outputLabel for="id" value="#{msg.ENTER_USER_NAME}" />
                                                                </div>
 
                                                                <div class="table_right">
-                                                                       <h:inputText class="input" id="id" size="10" maxlength="20" />
+                                                                       <h:inputText class="input" id="id" size="10" maxlength="20" value="#{passwordRecoveryController.userId}" />
                                                                </div>
 
                                                                <div class="clear"></div>
@@ -46,7 +46,7 @@
                                                                </div>
 
                                                                <div class="table_right">
-                                                                       <h:inputText class="input" id="email" size="20" maxlength="255" />
+                                                                       <h:inputText class="input" id="email" size="20" maxlength="255" value="#{passwordRecoveryController.emailAddress}" />
                                                                </div>
 
                                                                <div class="clear"></div>
@@ -56,7 +56,7 @@
 
                                                <div class="table_footer">
                                                        <h:commandButton class="reset" type="reset" value="#{msg.BUTTON_RESET_FORM}" />
-                                                       <h:commandButton class="submit" type="submit" value="#{msg.BUTTON_CONTINUE_STEP_2}" action="#{passwdRecoverController.doLostPasswordStep2()}" />
+                                                       <h:commandButton class="submit" type="submit" value="#{msg.BUTTON_CONTINUE_STEP_2}" action="#{passwordRecoveryController.doLostPasswordStep2()}" />
                                                </div>
                                        </div>
                                </h:form>