$zone->{'zone'}
+ Record(s):
+ ]
+ . $nt_obj->esc( $zone->{'zone'} ) . qq[
]
+ . $nt_obj->esc( $zone->{'zone'} ) . qq[
-  $zr->{'name'}
+ ]
+ . $nt_obj->esc( $zr->{'name'} )
+ . qq[
|
- $zr->{'type'} | -$zr->{'address'} | -$zr->{'ttl'} | -$zr->{'weight'} | -$zr->{'description'} | +] . $nt_obj->esc( $zr->{'type'} ) . qq[ | +] . $nt_obj->esc( $zr->{'address'} ) . qq[ | +] . $nt_obj->esc( $zr->{'ttl'} ) . qq[ | +] . $nt_obj->esc( $zr->{'weight'} ) . qq[ | +] . $nt_obj->esc( $zr->{'description'} ) . qq[ |
$_->{'zone'} ],
+ map(qq[ ]
+ . $nt_obj->esc( $_->{'zone'} )
+ . qq[ ],
@$zones )
);
@@ -150,7 +168,7 @@ sub delegate_zones {
$nt_obj->display_nice_error( $message, "Delegate Zone Records" )
if $message;
- display_record( $title, $zone, $zr );
+ display_record( $nt_obj, $title, $zone, $zr );
}
if ( !$edit ) {
@@ -182,7 +200,7 @@ sub delegate_zones {
-method => 'POST',
-name => $edit
),
- "\n",
+ $nt_obj->csrf_hidden_field(), "\n",
$q->hidden(
-name => 'obj_list',
-value => join( ',', $q->multi_param('obj_list') ),
@@ -214,10 +232,12 @@ sub delegate_zones {
$del->{'group_name'}
+ ]
+ . $nt_obj->esc( $del->{'group_name'} ) . qq[
$del->{'delegated_by_name'}
+ ]
+ . $nt_obj->esc( $del->{'delegated_by_name'} ) . qq[
|
| Username: | $duser->{'username'} | +Username: | ] + . $nt_obj->esc( $duser->{'username'} ) + . qq[ |
| Email: | $duser->{'email'} | +Email: | ] + . $nt_obj->esc( $duser->{'email'} ) + . qq[ |
| First Name: | $duser->{'first_name'} | +First Name: | ] + . $nt_obj->esc( $duser->{'first_name'} ) + . qq[ |
| Last Name: | $duser->{'last_name'} | +Last Name: | ] + . $nt_obj->esc( $duser->{'last_name'} ) + . qq[ |
| $row->{'title'} | +] . $nt_obj->esc( $row->{'title'} ) . qq[ |
| $row->{'target_name'} | +] . $nt_obj->esc( $row->{'target_name'} ) . qq[ |
$zone->{'delegated_by_name'}
+ ]
+ . _esc( $zone->{'delegated_by_name'} ) . qq[
|
- $zone->{'group_name'} | +] . _esc( $zone->{'group_name'} ) . qq[ |
$del->{'group_name'} $del->{'delegated_by_name'} ]
+ . _esc( $del->{'group_name'} ) . qq[ ]
+ . _esc( $del->{'delegated_by_name'} ) . qq[ 
];
+ qq[{'zone'} to group $del->{'group_name'}?"
+ )
+ )
+ . qq[');">];
}
else {
print
@@ -396,7 +418,7 @@ sub display_zone_properties {
print qq[
$ns->{name}]
+ . _esc( $ns->{name} ) . qq[(tip: hover over address)'; + _esc( substr( $r_record->{address}, 0, 35 ) ) + . ' ...
(tip: hover over address)'; } elsif ( $r_record->{type} =~ /^(?:TXT)$/ && length $r_record->{address} > 100 ) { - $r_record->{title} = $r_record->{address}; + $r_record->{title} = _esc( $r_record->{address} ); $r_record->{address} = - substr( $r_record->{address}, 0, 35 ) . ' ...
(tip: hover over address)'; + _esc( substr( $r_record->{address}, 0, 35 ) ) + . ' ...
(tip: hover over address)'; } else { my $max = 0; my @lines = (); while ( $max < length $r_record->{address} ) { - push @lines, substr( $r_record->{address}, $max, 40 ); + push @lines, _esc( substr( $r_record->{address}, $max, 40 ) ); $max += 40; } $r_record->{address} = join "
", @lines; } } + else { + $r_record->{address} = _esc( $r_record->{address} ); + } if ( $r_record->{type} eq 'IPSECKEY' ) { - $r_record->{description} = substr( $r_record->{description}, 0, 10 ) . ' ...'; + $r_record->{description} = _esc( substr( $r_record->{description}, 0, 10 ) ) . ' ...'; + } + else { + $r_record->{description} = _esc( $r_record->{description} ); } if ( $r_record->{type} eq 'AAAA' ) { $r_record->{address} =~ s/:[0]+/:/g; # compress leading zeros } + $r_record->{name} = _esc( $r_record->{name} ); + foreach (@columns) { if ( $_ eq 'name' ) { print qq[ @@ -610,8 +647,10 @@ sub display_zone_records { ]; } elsif ( $_ =~ /address|ttl|weight|priority|other/i ) { + my $title_attr = $r_record->{title} ? $r_record->{title} : ''; + my $val = $_ eq 'address' ? $r_record->{$_} : _esc( $r_record->{$_} ); print qq[ -
//g; # remove
inserted 64 lines above + my $confirm_msg = $nt_obj->esc( + $nt_obj->js_escape( + "Are you sure you want to delete $zone->{'zone'} $r_record->{'type'} record $raw_name that points to $raw_address ?" + ) + ); print qq[
