added some http-only configuration to avoid common XSS

[pizzaservice-war.git] / web / privacy.xhtml
diff --git a/web/privacy.xhtml b/web/privacy.xhtml

index 3cadc9eefbc76cab554b7beb5d71e86ca9f464f9..babc3643a1948a3acf102d3e54743342f10e13cd 100644 (file)
--- a/web/privacy.xhtml
+++ b/web/privacy.xhtml
@@ -3,11 +3,10 @@
  <html xmlns="http://www.w3.org/1999/xhtml"
           xmlns:ui="http://java.sun.com/jsf/facelets"
           xmlns:h="http://xmlns.jcp.org/jsf/html"
-         xmlns:c="http://xmlns.jcp.org/jsp/jstl/core"
           xmlns:f="http://xmlns.jcp.org/jsf/core"
           >
  
-       <ui:composition template="/WEB-INF/templates/guest/guest_base.tpl">
+       <ui:composition template="/WEB-INF/templates/#{loginController.templateType}/#{loginController.templateType}_base.tpl">
                 <ui:define name="guest_title">#{msg.PAGE_TITLE_INDEX_PRIVACY}</ui:define>
  
                 <ui:define name="content_header">