Add a few more escape calls to prevent nasty HTML being rendered. Also

[rails.git] / app / views / site / _sidebar.rhtml

diff --git a/app/views/site/_sidebar.rhtml b/app/views/site/_sidebar.rhtml
index ae557f90d98bf435ea56ebda3601434d4e000336..7addbe177a19fe40d100ce7f259480a187fe484f 100644 (file)
--- a/app/views/site/_sidebar.rhtml
+++ b/app/views/site/_sidebar.rhtml
@@ -12,12 +12,17 @@
 <script type="text/javascript">
 <!--
   function openSidebar() {
+    if (arguments.length) { $("sidebar").style.width = arguments[0]; }
+    else { $("sidebar").style.width = "30%"; }
+
     $("sidebar").style.display = "block";
+
     <%= onopen %>
   }
 
   function closeSidebar() {
     $("sidebar").style.display = "none";
+
     <%= onclose %>
   }
 
@@ -25,5 +30,10 @@
     $("sidebar_title").innerHTML = title;
     $("sidebar_content").innerHTML = content;
   }
+
+  function sidebarOpen(title) {
+    return $("sidebar").style.display == "block" &&
+           $("sidebar_title").innerHTML == title;
+  }
 // -->
 </script>