From 187cb9f06d48b16d029b65565a39279f13c84806 Mon Sep 17 00:00:00 2001
From: Sylvain <sylvain@sleede.com>
Date: Mon, 2 Nov 2020 13:36:17 +0100
Subject: [PATCH] replace modules.* by .modules.* for more secure access

---
 app/frontend/templates/admin/calendar/calendar.html   | 2 +-
 app/frontend/templates/admin/calendar/eventModal.html | 2 +-
 app/frontend/templates/admin/invoices/index.html      | 2 +-
 app/frontend/templates/admin/members/edit.html        | 4 ++--
 app/frontend/templates/admin/plans/edit.html          | 4 ++--
 app/frontend/templates/admin/pricing/credits.html     | 6 +++---
 app/frontend/templates/admin/pricing/index.html       | 2 +-
 app/frontend/templates/admin/settings/general.html    | 2 +-
 app/frontend/templates/calendar/filter.html           | 2 +-
 app/frontend/templates/dashboard/nav.html             | 4 ++--
 app/frontend/templates/shared/header.html.erb         | 4 ++--
 app/frontend/templates/shared/leftnav.html            | 2 +-
 app/frontend/templates/wallet/credit_modal.html       | 2 +-
 13 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/app/frontend/templates/admin/calendar/calendar.html b/app/frontend/templates/admin/calendar/calendar.html
index 54a9825cd..fee9dc7bf 100644
--- a/app/frontend/templates/admin/calendar/calendar.html
+++ b/app/frontend/templates/admin/calendar/calendar.html
@@ -38,7 +38,7 @@
       <div class="legends">
         <span class="calendar-legend text-sm border-formation" translate>{{ 'app.admin.calendar.trainings' }}</span><br>
         <span class="calendar-legend text-sm border-machine" translate>{{ 'app.admin.calendar.machines' }}</span><br>
-        <span class="calendar-legend text-sm border-space" ng-show="modules.spaces" translate>{{ 'app.admin.calendar.spaces' }}</span>
+        <span class="calendar-legend text-sm border-space" ng-show="$root.modules.spaces" translate>{{ 'app.admin.calendar.spaces' }}</span>
         <span class="calendar-legend text-sm border-event" ng-show="eventsInCalendar" translate>{{ 'app.admin.calendar.events' }}</span>
       </div>
     </div>
diff --git a/app/frontend/templates/admin/calendar/eventModal.html b/app/frontend/templates/admin/calendar/eventModal.html
index 12a8ddf85..a5bfc133b 100644
--- a/app/frontend/templates/admin/calendar/eventModal.html
+++ b/app/frontend/templates/admin/calendar/eventModal.html
@@ -18,7 +18,7 @@
         <span translate>{{ 'app.admin.calendar.machine' }}</span>
       </label>
     </div>
-    <div class="radio" ng-show="modules.spaces">
+    <div class="radio" ng-show="$root.modules.spaces">
       <label>
         <input type="radio" id="space" name="available_type" value="space" ng-model="availability.available_type" ng-disabled="spaces.length === 0">
         <span translate>{{ 'app.admin.calendar.space' }}</span>
diff --git a/app/frontend/templates/admin/invoices/index.html b/app/frontend/templates/admin/invoices/index.html
index c7c4eafe2..4b0f7998b 100644
--- a/app/frontend/templates/admin/invoices/index.html
+++ b/app/frontend/templates/admin/invoices/index.html
@@ -30,7 +30,7 @@
   <div class="row">
     <div class="col-md-12" ng-if="isAuthorized('admin')">
       <uib-tabset justified="true" active="tabs.active">
-        <uib-tab heading="{{ 'app.admin.invoices.invoices_list' | translate }}" ng-show="modules.invoicing" index="0">
+        <uib-tab heading="{{ 'app.admin.invoices.invoices_list' | translate }}" ng-show="$root.modules.invoicing" index="0">
           <ng-include src="'/admin/invoices/list.html'"></ng-include>
 	      </uib-tab>
 
diff --git a/app/frontend/templates/admin/members/edit.html b/app/frontend/templates/admin/members/edit.html
index 621a2c61a..827610c06 100644
--- a/app/frontend/templates/admin/members/edit.html
+++ b/app/frontend/templates/admin/members/edit.html
@@ -192,7 +192,7 @@
           </div>
         </uib-tab>
 
-        <uib-tab heading="{{ 'app.admin.members_edit.invoices' | translate }}" ng-show="modules.invoicing">
+        <uib-tab heading="{{ 'app.admin.members_edit.invoices' | translate }}" ng-show="$root.modules.invoicing">
           <div class="col-md-12 m m-t-lg">
 
 
@@ -229,7 +229,7 @@
           </div>
         </uib-tab>
 
-        <uib-tab heading="{{ 'app.admin.members_edit.wallet' | translate }}" ng-show="modules.wallet">
+        <uib-tab heading="{{ 'app.admin.members_edit.wallet' | translate }}" ng-show="$root.modules.wallet">
           <div class="col-md-12 m m-t-lg">
             <ng-include src="'/wallet/show.html'"></ng-include>
 
diff --git a/app/frontend/templates/admin/plans/edit.html b/app/frontend/templates/admin/plans/edit.html
index 21a5b6faf..9eaf1b6f2 100644
--- a/app/frontend/templates/admin/plans/edit.html
+++ b/app/frontend/templates/admin/plans/edit.html
@@ -73,8 +73,8 @@
                   </tbody>
               </table>
 
-              <h3 ng-show="modules.spaces" translate>{{ 'app.admin.plans.edit.spaces' }}</h3>
-              <table class="table" ng-show="modules.spaces">
+              <h3 ng-show="$root.modules.spaces" translate>{{ 'app.admin.plans.edit.spaces' }}</h3>
+              <table class="table" ng-show="$root.modules.spaces">
                 <thead>
                   <th translate>{{ 'app.admin.plans.edit.space' }}</th>
                   <th translate>{{ 'app.admin.plans.edit.hourly_rate' }}</th>
diff --git a/app/frontend/templates/admin/pricing/credits.html b/app/frontend/templates/admin/pricing/credits.html
index ddf1497fc..31451e400 100644
--- a/app/frontend/templates/admin/pricing/credits.html
+++ b/app/frontend/templates/admin/pricing/credits.html
@@ -96,11 +96,11 @@
   </tbody>
 </table>
 
-<h2 ng-show="modules.spaces" class="m-t-lg" translate>{{ 'app.admin.pricing.spaces' }}</h2>
-<div ng-show="modules.spaces" class="btn-group m-t-md m-b-md">
+<h2 ng-show="$root.modules.spaces" class="m-t-lg" translate>{{ 'app.admin.pricing.spaces' }}</h2>
+<div ng-show="$root.modules.spaces" class="btn-group m-t-md m-b-md">
   <button type="button" class="btn btn-warning" ng-click="addSpaceCredit($event)" translate>{{ 'app.admin.pricing.add_a_space_credit' }}</button>
 </div>
-<table ng-show="modules.spaces" class="table">
+<table ng-show="$root.modules.spaces" class="table">
   <thead>
   <tr>
     <th style="width:20%" translate>{{ 'app.admin.pricing.space' }}</th>
diff --git a/app/frontend/templates/admin/pricing/index.html b/app/frontend/templates/admin/pricing/index.html
index 3d0b6107f..29dcd202e 100644
--- a/app/frontend/templates/admin/pricing/index.html
+++ b/app/frontend/templates/admin/pricing/index.html
@@ -39,7 +39,7 @@
           <ng-include src="'/admin/pricing/machine_hours.html'"></ng-include>
         </uib-tab>
 
-        <uib-tab heading="{{ 'app.admin.pricing.spaces' | translate }}" ng-show="modules.spaces" index="3" class="spaces-tab">
+        <uib-tab heading="{{ 'app.admin.pricing.spaces' | translate }}" ng-show="$root.modules.spaces" index="3" class="spaces-tab">
           <ng-include src="'/admin/pricing/spaces.html'"></ng-include>
         </uib-tab>
 
diff --git a/app/frontend/templates/admin/settings/general.html b/app/frontend/templates/admin/settings/general.html
index c7125ee55..d2cbefa19 100644
--- a/app/frontend/templates/admin/settings/general.html
+++ b/app/frontend/templates/admin/settings/general.html
@@ -89,7 +89,7 @@
                 </div>
                 <button name="button" class="btn btn-warning" ng-click="save(eventExplicationsAlert)" translate>{{ 'app.shared.buttons.save' }}</button>
             </div>
-            <div class="col-md-3" ng-show="modules.spaces">
+            <div class="col-md-3" ng-show="$root.modules.spaces">
                 <h4 translate>{{ 'app.admin.settings.message_of_the_spaces_page' }}</h4>
                 <div ng-model="spaceExplicationsAlert.value" medium-editor options='{"placeholder": "{{ "app.admin.settings.type_the_message_content" | translate }}",
                       "buttons": ["bold", "italic", "unorderedlist", "header2" ]
diff --git a/app/frontend/templates/calendar/filter.html b/app/frontend/templates/calendar/filter.html
index 1b9021bd6..f1a9f61b4 100644
--- a/app/frontend/templates/calendar/filter.html
+++ b/app/frontend/templates/calendar/filter.html
@@ -18,7 +18,7 @@
     <input class="col-md-1 col-sm-1 col-xs-1" type="checkbox" ng-model="m.checked" ng-change="filterAvailabilities(filter)">
   </div>
 </div>
-<div class="m-t" ng-show="modules.spaces">
+<div class="m-t" ng-show="$root.modules.spaces">
   <div class="row">
     <h3 class="col-md-11 col-sm-11 col-xs-11 text-cyan" translate>{{ 'app.public.calendar.spaces' }}</h3>
     <input class="col-md-1 col-sm-1 col-xs-1" type="checkbox" ng-model="filter.spaces" ng-change="toggleFilter('spaces', filter)">
diff --git a/app/frontend/templates/dashboard/nav.html b/app/frontend/templates/dashboard/nav.html
index f36f662aa..70898f726 100644
--- a/app/frontend/templates/dashboard/nav.html
+++ b/app/frontend/templates/dashboard/nav.html
@@ -15,8 +15,8 @@
           <li ui-sref-active="active"><a class="text-black" href="#" ui-sref="app.logged.dashboard.projects" translate>{{ 'app.public.common.my_projects' }}</a></li>
           <li ui-sref-active="active"><a class="text-black" href="#" ui-sref="app.logged.dashboard.trainings" translate>{{ 'app.public.common.my_trainings' }}</a></li>
           <li ui-sref-active="active"><a class="text-black" href="#" ui-sref="app.logged.dashboard.events" translate>{{ 'app.public.common.my_events' }}</a></li>
-          <li ui-sref-active="active" ng-show="modules.invoicing"><a class="text-black" href="#" ui-sref="app.logged.dashboard.invoices" translate>{{ 'app.public.common.my_invoices' }}</a></li>
-          <li ng-show="modules.wallet" ui-sref-active="active"><a class="text-black" href="#" ui-sref="app.logged.dashboard.wallet" translate>{{ 'app.public.common.my_wallet' }}</a></li>
+          <li ui-sref-active="active" ng-show="$root.modules.invoicing"><a class="text-black" href="#" ui-sref="app.logged.dashboard.invoices" translate>{{ 'app.public.common.my_invoices' }}</a></li>
+          <li ng-show="$root.modules.wallet" ui-sref-active="active"><a class="text-black" href="#" ui-sref="app.logged.dashboard.wallet" translate>{{ 'app.public.common.my_wallet' }}</a></li>
         </ul>
       </section>
     </div>
diff --git a/app/frontend/templates/shared/header.html.erb b/app/frontend/templates/shared/header.html.erb
index c2983d9bb..b00acbe8e 100644
--- a/app/frontend/templates/shared/header.html.erb
+++ b/app/frontend/templates/shared/header.html.erb
@@ -39,8 +39,8 @@
         <li><a ui-sref="app.logged.dashboard.projects" translate>{{ 'app.public.common.my_projects' }}</a></li>
         <li><a ui-sref="app.logged.dashboard.trainings" translate>{{ 'app.public.common.my_trainings' }}</a></li>
         <li><a ui-sref="app.logged.dashboard.events" translate>{{ 'app.public.common.my_events' }}</a></li>
-        <li><a ui-sref="app.logged.dashboard.invoices" ng-show="modules.invoicing" translate>{{ 'app.public.common.my_invoices' }}</a></li>
-        <li ng-show="modules.wallet"><a ui-sref="app.logged.dashboard.wallet" translate>{{ 'app.public.common.my_wallet' }}</a></li>
+        <li><a ui-sref="app.logged.dashboard.invoices" ng-show="$root.modules.invoicing" translate>{{ 'app.public.common.my_invoices' }}</a></li>
+        <li ng-show="$root.modules.wallet"><a ui-sref="app.logged.dashboard.wallet" translate>{{ 'app.public.common.my_wallet' }}</a></li>
         <li class="divider" ng-if="isAuthorized(['admin', 'manager'])"></li>
         <li><a class="text-black pointer" ng-click="help($event)" ng-if="isAuthorized(['admin', 'manager'])"><i class="fa fa-question-circle"></i> <span translate>{{ 'app.public.common.help' }}</span> </a></li>
         <li class="divider"></li>
diff --git a/app/frontend/templates/shared/leftnav.html b/app/frontend/templates/shared/leftnav.html
index ac404edac..d5b221288 100644
--- a/app/frontend/templates/shared/leftnav.html
+++ b/app/frontend/templates/shared/leftnav.html
@@ -56,7 +56,7 @@
                     <i class="fa fa-calendar-o"></i> <span translate>{{ 'app.public.common.my_events' }}</span>
                 </a>
             </li>
-            <li class="hidden-sm hidden-md hidden-lg" ng-show="modules.invoicing" ng-if-end>
+            <li class="hidden-sm hidden-md hidden-lg" ng-show="$root.modules.invoicing" ng-if-end>
                 <a ui-sref="app.logged.dashboard.invoices">
                     <i class="fa fa-file-pdf-o"></i> <span translate>{{ 'app.public.common.my_invoices' }}</span>
                 </a>
diff --git a/app/frontend/templates/wallet/credit_modal.html b/app/frontend/templates/wallet/credit_modal.html
index 30f2e4b14..b47aa7a34 100644
--- a/app/frontend/templates/wallet/credit_modal.html
+++ b/app/frontend/templates/wallet/credit_modal.html
@@ -40,7 +40,7 @@
     </div>
 
     <hr/>
-    <div class="text-right m-t" ng-show="modules.invoicing">
+    <div class="text-right m-t" ng-show="$root.modules.invoicing">
       <label for="generate_avoir" translate>{{ 'app.shared.wallet.generate_a_refund_invoice' }}</label>
       <div class="inline m-l">
         <input bs-switch