refactor

Author: odeimaiz

services/static-webserver/client/source/class/osparc/auth/ui/RequestAccount.js

@@ -197,7 +197,9 @@ qx.Class.define("osparc.auth.ui.RequestAccount", {
             id: "Image_based_Modeling",
             label: "Image-based Modeling"
           }].forEach(appData => {
-            const lItem = new qx.ui.form.ListItem(appData.label, null, appData.id);
+            const lItem = new qx.ui.form.ListItem(appData.label, null, appData.id).set({
+              rich: true
+            });
             application.add(lItem);
           });
           doubleSpaced.push(application);

services/static-webserver/client/source/class/osparc/auth/ui/VerifyPhoneNumberView.js

@@ -45,6 +45,7 @@ qx.Class.define("osparc.auth.ui.VerifyPhoneNumberView", {
           control = new qx.ui.basic.Label().set({
             value: this.tr("Two-Factor Authentication (2FA)"),
             allowGrowX: true,
+            rich: true,
             font: "text-16"
           });
           this.add(control);

services/static-webserver/client/source/class/osparc/dashboard/GroupedCardContainer.js

@@ -106,13 +106,7 @@ qx.Class.define("osparc.dashboard.GroupedCardContainer", {
             rich: true,
             wrap: true
           });
-          atomLabel.addListener("changeValue", e => {
-            const val = e.getData();
-            const sanitized = osparc.wrapper.DOMPurify.sanitize(val);
-            if (sanitized !== val) {
-              atomLabel.setValue(sanitized);
-            }
-          });
+          osparc.wrapper.DOMPurify.sanitizeLabel(atomLabel);
           control.getContentElement().setStyles({
             "border-top-left-radius": "4px",
             "border-top-right-radius": "4px"

services/static-webserver/client/source/class/osparc/file/FolderContent.js

@@ -75,13 +75,7 @@ qx.Class.define("osparc.file.FolderContent", {
         maxWidth: 100,
         maxHeight: 33 // two lines
       });
-      toggleLabel.addListener("changeValue", e => {
-        const val = e.getData();
-        const sanitized = osparc.wrapper.DOMPurify.sanitize(val);
-        if (sanitized !== val) {
-          toggleLabel.setValue(sanitized);
-        }
-      });
+      osparc.wrapper.DOMPurify.sanitizeLabel(toggleLabel);
       osparc.utils.Utils.setIdToWidget(item, "FolderViewerItem");
       return item;
     },

services/static-webserver/client/source/class/osparc/ui/basic/SafeLabel.js

@@ -16,7 +16,7 @@
 ************************************************************************ */
 
 /**
- * A Label that sanitizes its value when in rich mode to avoid XSS attacks
+ * A Label that sanitizes its value to avoid XSS attacks
  */
 
 qx.Class.define("osparc.ui.basic.SafeLabel", {

services/static-webserver/client/source/class/osparc/ui/form/renderer/DoubleV.js

@@ -167,12 +167,10 @@ qx.Class.define("osparc.ui.form.renderer.DoubleV", {
      * @param name {String} The content of the label without the
      *   trailing * and :
      * @param item {qx.ui.core.Widget} The item, which has the required state.
-     * @return {qx.ui.basic.Label} The label for the given item.
+     * @return {osparc.ui.basic.SafeLabel} The label for the given item.
      */
     _createLabel: function(name, item) {
-      const label = new qx.ui.basic.Label(this._createLabelText(name, item)).set({
-        rich: true,
-      });
+      const label = new osparc.ui.basic.SafeLabel(this._createLabelText(name, item));
       // store labels for disposal
       this._labels.push(label);
       return label;

services/static-webserver/client/source/class/osparc/workbench/NodeUI.js

@@ -70,8 +70,10 @@ qx.Class.define("osparc.workbench.NodeUI", {
 
     const captionTitle = this.getChildControl("title");
     captionTitle.set({
+      rich: true,
       cursor: "move"
     });
+    osparc.wrapper.DOMPurify.sanitizeLabel(captionTitle);
 
     this.__nodeMoving = false;
 

services/static-webserver/client/source/class/osparc/wrapper/DOMPurify.js

@@ -48,6 +48,16 @@ qx.Class.define("osparc.wrapper.DOMPurify", {
     sanitize: function(html) {
       return osparc.wrapper.DOMPurify.getInstance().sanitize(html);
     },
+
+    sanitizeLabel: function(label) {
+      label.addListener("changeValue", e => {
+        const val = e.getData();
+        const sanitized = osparc.wrapper.DOMPurify.sanitize(val);
+        if (sanitized !== val) {
+          label.setValue(sanitized);
+        }
+      });
+    },
   },
 
   construct: function() {