Menu
I am trying to pass a value to my javascript function but that function call depends on a boolean variable. I had this working fine until I recently upgraded to thymeleaf security 5.
This is the code snippet.
<body th:onload="${timerEnabled} ? 'javascript:runTimer(\'' + ${timeRemaining} + '\');'"> timerEnabled has to be true for the function call to be done but thymeleaf now throws an exception as
org.thymeleaf.exceptions.TemplateProcessingException: Only variable expressions returning numbers or booleans are allowed in this context, any other datatypes are not trusted in the context of this expression, including Strings or any other object that could be rendered as a text literal. A typical case is HTML attributes for event handlers (e.g. "onload"), in which textual data from variables should better be output to "data-*" attributes and then read from the event handler. How can I resolve this? Thank you.
403
Since Thymeleaf 3.0.10 they fixed a security-bug regarding unescaped code.
Try
<body th:onload="[[${timerEnabled}]] ? 'javascript:runTimer(\'' + [[${timeRemaining}]] + '\');'"> Or the recommended way:
<body th:data1="${timerEnabled}" th:data2="${timeRemaining}" th:onload="this.getAttribute('data1') ? javascript:runTimer(this.getAttribute('data2'));"> To read more: https://github.com/thymeleaf/thymeleaf/issues/707 And: http://forum.thymeleaf.org/Thymeleaf-3-0-10-JUST-PUBLISHED-tt4031348.html#a4031353
132
I was able to have it working by using this approach
<body> <script th:inline="javascript"> /*<![CDATA[*/ var flag = [[${timerEnabled}]]; // if timer should be included or not var timeRemaining = [[${timeRemaining}]]; // the time remaining. window.onload = function() { if(!flag) return; // Exit/Return if the variable is false runTimer(timeRemaining); // Call your favourite method if the variable is true }; /*]]>*/ </script> Any other approach such as suggested in the exception is appreciated.
28
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With