Refactored AJAX request, putting armor against XSS

resources/sandbox/sandbox.js

@@ -5,29 +5,59 @@ https://www.youtube.com/watch?v=h0ZUpPiV1ac
 window.onload = function(){
 
   const serverPath = "https://server.figytuna.com:8080/ali/hello/";
-  const pages = [
+  const pages = {
-    "World",
+    "unsafe": [
-    "Data",
+      "World",
-    "Players",
+      "Data",
-    "Location"
+      "Post"
-  ]
+    ],
+    "html":[
+      "Location",
+      "Players",
+    ]
+  }
   //Generate HTML table
-  for (const pagePath of pages){
+  for (const pageType in pages){
-    //Adds new table row based on the data request
+    for (const pagePath of pages[pageType]){
-    const $newTableRow = $("<tr>"
+      //Adds new table row based on the data request
-      + "<td>Hello " + pagePath + "</td>"
+      const $newTableRow = $("<tr>"
-      + "<td id=\"hello-"+ pagePath.toLowerCase() + "\"></td>"
+        + "<td>Hello " + pagePath + "</td>"
-      + "</tr>");
+        + "<td id=\"hello-"+ pagePath.toLowerCase() + "\"></td>"
+        + "</tr>");
 
-    //Appends new table row to table
+        console.log(pagePath + " added");
-    $("#hello-table").after($newTableRow);
+      //Appends new table row to table
+      $("#hello-table").append($newTableRow);
+    }
   }
 
-  //Gets Table data from server
+  dataRequest = function(pagePath, pageType, requestType){
-  for (const pagePath of pages){
+    $.ajax({
-    $.get(serverPath + pagePath.toLowerCase(), function(data){
+      type: requestType,
-      console.log(pagePath + "|" + data);
+      url: serverPath + pagePath.toLowerCase(),
-      document.getElementById("hello-" + pagePath.toLowerCase()).innerHTML = data;
+      timeout: 2000,
+      beforeSend: function(data){
+        $("#hello-" + pagePath.toLowerCase()).html("<em>Loading...</em>");
+      },
+      success: function(data){
+        $element = $("#hello-" + pagePath.toLowerCase())
+        if (pageType == "html"){
+          $element.html($data);
+        }else{
+          $element.text($data);
+        }
+      },
+      error: function(e){
+        $("#hello-" + pagePath.toLowerCase()).html("<em>Error " + e.status + " " + e.statusText + "</em>");
+      }
     });
   }
+  //Gets Table data from server
+  for (const pagePath of pages["html"]){
+    dataRequest(pagePath, "safe", "GET");
+  }
+
+  for (const pagePath of pages["unsafe"]){
+    dataRequest(pagePath, "unsafe", "GET");
+  }
 }