-<div id="search_results">
- <table class="search_results_title" width="100%">
- <tr>
- <td align="left">Search Results</td>
- <td align="right"><a href="javascript:closeSearchResults()">Close</a></td>
- </tr>
- </table>
- <div id="search_results_content">
- </div>
-</div>
-
<script type="text/javascript">
<!--
function startSearch() {
- $("search_results_content").innerHTML = "<p class='search_results_entry'>Searching...</p>";
+ updateSidebar("Search Results", "<p class='search_results_entry'>Searching...</p>");
+
$("search_field").style.display = "none";
$("search_active").style.display = "inline";
}
$("search_active").style.display = "none";
}
- function openSearchResults() {
- $("search_results").style.display = "block";
- <%= onopen %>
- }
-
- function closeSearchResults() {
- $("search_results").style.display = "none";
- <%= onclose %>
- }
-
function describeLocation() {
var position = getPosition();
<% if params[:query] %>
<%= remote_function(:loading => "startSearch()",
:complete => "endSearch()",
- :url => { :controller => :geocoder, :action => :search, :query => params[:query] }) %>
+ :url => { :controller => :geocoder, :action => :search, :query => h(params[:query]) }) %>
<% end %>
// -->
</script>
<% form_remote_tag(:loading => "startSearch()",
:complete => "endSearch()",
:url => { :controller => :geocoder, :action => :search }) do %>
- <%= text_field_tag :query, params[:query] %>
+ <%= text_field_tag :query, h(params[:query]) %>
<% end %>
</span>
<p id="search_active">Searching...</p>