NetteModel, XSS fix a dalsie veci o ktorych som pisal

BaseButton.php

@@ -29,8 +29,32 @@ abstract class BaseButton extends \Nette\Application\UI\PresenterComponent
 
 	/** @var bool */
 	private $showText = true;
+
+    /** @var string */
+    private $enabled = true;
 
 
+	/**
+	 * Is button enabled
+	 * @param mixed row
+	 * @return bool
+     */
+    public function isEnabled($row = null)
+    {
+		return is_bool($this->enabled) ? $this->enabled : call_user_func($this->enabled, $row);
+    }
+
+    /**
+     * Set enabled
+     * @param bool $enabled
+     * @return CheckButton
+     */
+    public function SetEnabled($enabled = true)
+    {
+        $this->enabled = $enabled;
+        return $this;
+    }
+
 
 	/**
 	 * Get label
@@ -239,11 +263,28 @@ public function handleClick($token, $uniqueId = null)
 	 */
 	protected function createButton($row = null)
 	{
-		return Html::el("a")
-			->href($this->getLink($row))
-			->data("gridito-icon", $this->icon)
-			->class(array("gridito-button", $this->showText ? null : "gridito-hide-text"))
-			->setText($this->label);
+        $button = Html::el('a');
+        if ($this->isEnabled($row)) {
+            $button->href($this->getLink($row));
+        } else {
+            $button->class[] = 'disabled';
+        }
+        $button->class[] = 'gridito-button';
+        if ($this->icon && $this->showText) {
+            $button->class[] = 'button-icon-text';
+        } elseif ($this->icon) {
+            $button->class[] = 'button-icon';
+            $button->class[] = 'gridito-hide-text';
+            $button->title($this->label);
+        } else {
+            $button->class[] = 'button-text';
+        }
+
+        if ($this->icon)  {
+            $button->create('span')->class(array('gridito-icon', $this->icon));
+        } 
+        $button->create('span class="gridito-text"')->setText($this->label);
+        return $button;
 	}
 
 
@@ -259,4 +300,4 @@ public function render($row = null)
 		}
 	}
 
-}
+}

Button.php

@@ -52,7 +52,7 @@ public function getConfirmationQuestion($row)
 		if (is_callable($this->confirmationQuestion)) {
 			return call_user_func($this->confirmationQuestion, $row);
 		} else {
-			return $this->confirmationQuestion;
+			return Grid::formatRecordString($row, $this->confirmationQuestion);
 		}
 	}
 
@@ -103,4 +103,4 @@ protected function createButton($row = null)
 		return $el;
 	}
 
-}
+}

CheckButton.php

@@ -0,0 +1,99 @@
+<?php
+
+namespace Gridito;
+
+/**
+ * Action button
+ *
+ * @author Jan Marek
+ * @license MIT
+ */
+class CheckButton extends BaseButton
+{
+    /** @var bool */
+    private $ajax = false;
+
+    /** @var string */
+    private $checked = false;
+
+    /**
+     * Set checked
+     * @param bool $checked
+     * @return CheckButton
+     */
+    public function SetChecked($checked = true)
+    {
+        $this->checked = $checked;
+        return $this;
+    }
+
+
+	/**
+	 * Is button checked
+	 * @param mixed row
+	 * @return bool
+     */
+    public function isChecked($row = null)
+    {
+		return is_bool($this->checked) ? $this->checked : call_user_func($this->checked, $row);
+    }
+
+
+    /**
+     * Is ajax?
+     * @return bool
+     */
+    public function isAjax()
+    {
+        return $this->ajax;
+    }
+
+
+
+    /**
+     * Set ajax mode
+     * @param bool ajax
+     * @return Button
+     */
+    public function setAjax($ajax)
+    {
+        $this->ajax = (bool) $ajax;
+        return $this;
+    }
+
+
+
+    /**
+     * Handle click signal
+     * @param string security token
+     * @param mixed primary key
+     */
+    public function handleClick($token, $uniqueId = null)
+    {
+        parent::handleClick($token, $uniqueId);
+
+        if ($this->getPresenter()->isAjax()) {
+            $this->getGrid()->invalidateControl();
+        } else {
+            $this->getGrid()->redirect("this");
+        }
+    }
+
+
+
+    /**
+     * Create button element
+     * @param mixed row
+     * @return Nette\Web\Html
+     */
+    protected function createButton($row = null)
+    {
+        $el = parent::createButton($row);
+        if ($this->isChecked($row)) {
+            $el->class[] = 'checked';
+        }
+        $el->class[] = $this->isAjax() ? $this->getGrid()->getAjaxClass() : null;
+        return $el;
+    }
+
+}