Skip to content

Commit 9d9a5bd

Browse files
committed
UI: prevent form element names from being passed on user click/search
1 parent 30f1022 commit 9d9a5bd

1 file changed

Lines changed: 8 additions & 6 deletions

File tree

pygeoapi/templates/collections/items/index.html

Lines changed: 8 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -202,19 +202,19 @@ <h1>{% for l in data['links'] if l.rel == 'collection' %} {{ l['title'] }} {% en
202202
var datetime = [];
203203

204204
var q = document.getElementById('q').value;
205-
var datetime_begin = document.getElementById('datetime_begin').value;
206-
var datetime_end = document.getElementById('datetime_end').value;
205+
var datetime_begin = document.getElementById('datetime_begin');
206+
var datetime_end = document.getElementById('datetime_end');
207207

208208
if (q) {
209209
query_string.push('q=' + encodeURIComponent(q));
210210
}
211-
if (datetime_begin !== "") {
212-
datetime.push(datetime_begin + 'T00:00:00Z');
211+
if (datetime_begin.value !== "") {
212+
datetime.push(datetime_begin.value + 'T00:00:00Z');
213213
} else {
214214
datetime.push('..');
215215
}
216-
if (datetime_end !== "") {
217-
datetime.push(datetime_end + 'T23:59:59Z');
216+
if (datetime_end.value !== "") {
217+
datetime.push(datetime_end.value + 'T23:59:59Z');
218218
} else {
219219
datetime.push('..');
220220
}
@@ -223,6 +223,8 @@ <h1>{% for l in data['links'] if l.rel == 'collection' %} {{ l['title'] }} {% en
223223

224224
if (datetime !== '../..') {
225225
query_string.push('datetime=' + encodeURIComponent(datetime));
226+
datetime_begin.disabled = true;
227+
datetime_end.disabled = true;
226228
}
227229

228230
if (map.hasLayer(rectangle)) {

0 commit comments

Comments
 (0)