Don't escape HTML in the message shown to anonymous users

[rails.git] / app / views / site / _potlatch2.html.erb

diff --git a/app/views/site/_potlatch2.html.erb b/app/views/site/_potlatch2.html.erb
index 6073e0adf446e95c9156e56eaf2b9f92fc5ab200..ceb92558c590ddacf8274674a646a4d585f05025 100644 (file)
--- a/app/views/site/_potlatch2.html.erb
+++ b/app/views/site/_potlatch2.html.erb
@@ -1,15 +1,19 @@
 <div id="map">
 <div id="map">

-  <%= t 'site.edit.flash_player_required' %>
+  <div id="potlatch"><%= t 'site.edit.flash_player_required' %></div>

 </div>
 
 <%= javascript_include_tag 'swfobject.js' %>
 
 </div>
 
 <%= javascript_include_tag 'swfobject.js' %>
 

+<% if defined? POTLATCH2_KEY %>

 <% token = @user.access_token(POTLATCH2_KEY) %>
 <% token = @user.access_token(POTLATCH2_KEY) %>

+<% else%>
+<script type="text/javascript">alert("<%= t 'site.edit.potlatch2_not_configured' %>")</script>
+<% end %>
+
+<% locale = request.compatible_language_from(Potlatch2::LOCALES.keys) || "en" %>

 
 <script type="text/javascript" defer="defer">
   var brokenContentSize = $("content").offsetWidth == 0;
 
 <script type="text/javascript" defer="defer">
   var brokenContentSize = $("content").offsetWidth == 0;

-  var fo = new SWFObject("/potlatch2/potlatch2.swf?d="+Math.round(Math.random()*1000), "potlatch", "100%", "100%", "9", "#FFFFFF");
-  // 700,600 for fixed size, 100%,100% for resizable

   var changesaved=true;
   
   window.onbeforeunload=function() {
   var changesaved=true;
   
   window.onbeforeunload=function() {


@@ -21,24 +25,40 @@
   function markChanged(a) { changesaved=a; }
 
   function doSWF(lat,lon,zoom) {
   function markChanged(a) { changesaved=a; }
 
   function doSWF(lat,lon,zoom) {

-    fo.addParam("base","/potlatch2");
-    if (lat) { fo.addVariable("lat",lat); }
-    if (lon) { fo.addVariable("lon",lon); }
+    var flashvars = {};
+    if (lat) { flashvars.lat = lat; }
+    if (lon) { flashvars.lon = lon; }
+    flashvars.zoom = zoom;
+    flashvars.locale = "<%= Potlatch2::LOCALES[locale] %>";

     <% if params['gpx'] %>
     <% if params['gpx'] %>

-    fo.addVariable('gpx' ,'<%= h(params['gpx']) %>');
+    flashvars.gpx = '<%= h(params['gpx']) %>';
+    <% end %>
+    <% if params['tileurl'] %>
+    flashvars.tileurl = '<%= h(params['tileurl']) %>';
+    <% end %>
+    flashvars.api = "<%= request.protocol + request.host_with_port %>/api/<%= API_VERSION %>/";
+    flashvars.policy = "<%= request.protocol + request.host_with_port %>/api/crossdomain.xml";
+    flashvars.connection = "XML";
+    flashvars.show_help = "once";
+    <% if token %>
+    flashvars.oauth_token = "<%= token.token %>";
+    flashvars.oauth_token_secret = "<%= token.secret %>";
+    flashvars.oauth_consumer_key = "<%= token.client_application.key %>";
+    flashvars.oauth_consumer_secret = "<%= token.client_application.secret %>";

     <% end %>
     <% end %>

-    fo.addVariable("zoom",zoom);
-    fo.addVariable("api","/api/<%= API_VERSION %>/");
-    fo.addVariable("policy","/api/crossdomain.xml");
-    fo.addVariable("connection","XML");
-    fo.addVariable("oauth_token","<%= token.token %>");
-    fo.addVariable("oauth_token_secret","<%= token.secret %>");
-    fo.addVariable("oauth_consumer_key","<%= token.client_application.key %>");
-    fo.addVariable("oauth_consumer_secret","<%= token.client_application.secret %>");
-    fo.addVariable("maximise_function","maximiseMap");
-    fo.addVariable("minimise_function","minimiseMap");
-    fo.addVariable("move_function","mapMoved");
-    fo.write("map");
+    flashvars.maximise_function = "maximiseMap";
+    flashvars.minimise_function = "minimiseMap";
+    flashvars.move_function = "mapMoved";
+
+    var params = {};
+    params.base = "/potlatch2";
+
+    var attributes = {};
+    attributes.id = "potlatch";
+    attributes.bgcolor = "#FFFFFF";
+
+    swfobject.embedSWF("<%= asset_path("/potlatch2/potlatch2.swf") %>", "potlatch", "100%", "100%", "10.1.85","<%= asset_path("expressInstall.swf") %>", flashvars, params, attributes);
+    // 700,600 for fixed size, 100%,100% for resizable

   }
 
   doSWF(<%= @lat || 'null' %>,<%= @lon || 'null' %>,<%= @zoom %>);
   }
 
   doSWF(<%= @lat || 'null' %>,<%= @lon || 'null' %>,<%= @zoom %>);