5be810d6454c59c784482cbec0ec90e622abf317 max Tue Jun 13 05:28:17 2023 -0700 making localStorage reset global, refs #31503, idea by Braney and changed after code review, refs #31512 diff --git src/hg/cartReset/cartReset.c src/hg/cartReset/cartReset.c index f5bd151..f8bcbbf 100644 --- src/hg/cartReset/cartReset.c +++ src/hg/cartReset/cartReset.c @@ -1,77 +1,77 @@ /* cartReset - Reset cart. */ /* Copyright (C) 2013 The Regents of the University of California * See kent/LICENSE or http://genome.ucsc.edu/license/ for licensing information. */ #include "common.h" #include "linefile.h" #include "hash.h" #include "cheapcgi.h" #include "htmshell.h" #include "hui.h" #include "cart.h" static char *defaultDestination = "../cgi-bin/hgGateway"; boolean problem = FALSE; char *destination = NULL; static void resetLocalStorage() /* the cart is for configuration options that are relevant to a session. We are using more and more localStorage settings, these are * relevant to the particular web browser where the browser runs, e.g. notification settings, maybe one day font sizes and color schemes of the UI. * QA must be able to reset these, too, so do this here now */ { -jsInline("localStorage.removeItem('hgTracks.hideSpeedNotification');"); +jsInline("localStorage.clear();"); } void doMiddle() /* cartReset - Reset cart. */ { if (problem) { warn("To stop Open Redirect abuse, only relative URLs are supported. " "Request for destination=[%s] rejected.\n", destination); } cartResetInDb(hUserCookie()); resetLocalStorage(); jsInlineFinish(); } int main(int argc, char *argv[]) /* Process command line. */ { long enteredMainTime = clock1000(); struct dyString *headText = dyStringNew(512); destination = cgiUsualString("destination", defaultDestination); // Only allow relative URL that does not contain space or quote characters. if (strstr(destination, "//") // absolute URL || strchr(destination, '\'') // single quote || strchr(destination, '"') // double quote || strchr(destination, ' ') // space || sameString(destination, "") // empty string ) { problem = TRUE; } char *csp = getCspMetaHeader(); // ContentSecurityPolicy stops XSS js in destination dyStringPrintf(headText, "%s",csp); if (!problem) { dyStringPrintf(headText, "" "" "" ,destination); } htmShellWithHead("Reset Cart", headText->string, doMiddle, NULL); freeMem(csp); dyStringFree(&headText); cgiExitTime("cartReset", enteredMainTime); return 0; }