secure confirmAction.patch

[Jacques Le Roux]

As I'm busy and focused on securing URLs, I need a little help to avoid 
searching by myself.

My worry is 

Index: applications/party/widget/partymgr/PartyMenus.xml
===================================================================
--- applications/party/widget/partymgr/PartyMenus.xml    (revision 760815)
+++ applications/party/widget/partymgr/PartyMenus.xml    (working copy)
@@ -260,7 +260,10 @@
             <condition>
                 <if-compare field="parameters.all" operator="equals" 
value="true" />
             </condition>
-            <link 
target="${bsh:session.getAttribute(&quot;_LAST_VIEW_NAME_&quot;)}?portalPageId=${parameters.portalPageId}&amp;all=false"
 />
+            <link 
target="${session.getAttribute(&quot;_LAST_VIEW_NAME_&quot;)}" >
+                <parameter param-name="portalPageId" 
from-field="parameters.portalPageId"/>
+                <parameter param-name="all" value="false"/>
+            </link>
         </menu-item>
         <menu-item name="allOtherEvents" title="${uiLabelMap.PartyAllEvents}">
             <condition>
@@ -269,7 +272,10 @@
                     <if-empty field="parameters.all"/>
                 </or>
             </condition>
-            <link 
target="${bsh:session.getAttribute(&quot;_LAST_VIEW_NAME_&quot;)}?portalPageId=${parameters.portalPageId}&amp;all=true"
 />
+            <link 
target="${session.getAttribute(&quot;_LAST_VIEW_NAME_&quot;)}" >
+                <parameter param-name="portalPageId" 
from-field="parameters.portalPageId"/>
+                <parameter param-name="all" value="true"/>
+            </link>
         </menu-item>
     </menu>    
     <menu name="MyCommSubTabBar" menu-container-style="button-bar 
button-style-2">
Index: specialpurpose/mypage/widget/MyPageMenus.xml
===================================================================
--- specialpurpose/mypage/widget/MyPageMenus.xml    (revision 760815)
+++ specialpurpose/mypage/widget/MyPageMenus.xml    (working copy)
@@ -154,7 +154,10 @@
             <condition>
                 <if-compare field="parameters.all" operator="equals" 
value="true" />
             </condition>
-            <link 
target="${parameters.donePage}?donePage=${parameters.donePage}&amp;all=false" />
+            <link target="${parameters.donePage}" >
+                <parameter param-name="donePage" 
from-field="parameters.donePage"/>
+                <parameter param-name="all" value="false"/>
+            </link>
         </menu-item>
         <menu-item name="allOtherEvents" title="${uiLabelMap.MyPageAllEvents}">
             <condition>
@@ -163,7 +166,10 @@
                     <if-empty field="parameters.all"/>
                 </or>
             </condition>
-            <link 
target="${parameters.donePage}?donePage=${parameters.donePage}&amp;all=true" />
+            <link target="${parameters.donePage}" >
+                <parameter param-name="donePage" 
from-field="parameters.donePage"/>
+                <parameter param-name="all" value="true"/>
+            </link>
         </menu-item>
     </menu>    
     
Thanks

Jacques