From ff0affc679410a5792cd65af6c2755cb532610d8 Mon Sep 17 00:00:00 2001
From: Terrtia <or1994@hotmail.fr>
Date: Wed, 26 Sep 2018 11:59:51 +0200
Subject: [PATCH] fix: [Flask] remove hardcoded url

---
 .../modules/PasteSubmit/Flask_PasteSubmit.py  |  9 ++++++
 .../PasteSubmit/templates/PasteSubmit.html    |  4 +--
 .../templates/edit_tag_export.html            | 10 +++----
 .../PasteSubmit/templates/submiting.html      |  4 +--
 .../modules/Tags/templates/edit_galaxy.html   | 14 ++++-----
 .../Tags/templates/edit_taxonomie.html        | 10 +++----
 var/www/modules/Tags/templates/galaxies.html  |  8 ++---
 .../Tags/templates/tag_galaxy_info.html       |  8 ++---
 var/www/modules/Tags/templates/tagged.html    | 18 ++++++------
 .../modules/Tags/templates/taxonomies.html    |  8 ++---
 .../dashboard/templates/searchbox.html        |  2 +-
 .../modules/hashDecoded/Flask_hashDecoded.py  |  2 +-
 .../hashDecoded/templates/hashDecoded.html    | 29 +++++++++----------
 .../hashDecoded/templates/showHash.html       |  2 +-
 .../showpaste/templates/show_saved_paste.html |  4 +--
 15 files changed, 70 insertions(+), 62 deletions(-)

diff --git a/var/www/modules/PasteSubmit/Flask_PasteSubmit.py b/var/www/modules/PasteSubmit/Flask_PasteSubmit.py
index 122fc74c..16930ef8 100644
--- a/var/www/modules/PasteSubmit/Flask_PasteSubmit.py
+++ b/var/www/modules/PasteSubmit/Flask_PasteSubmit.py
@@ -296,6 +296,11 @@ def submit():
 
     submitted_tag = 'infoleak:submission="manual"'
 
+    #active taxonomies
+    active_taxonomies = r_serv_tags.smembers('active_taxonomies')
+    #active galaxies
+    active_galaxies = r_serv_tags.smembers('active_galaxies')
+
     if ltags or ltagsgalaxies:
         if not addTagsVerification(ltags, ltagsgalaxies):
             content = 'INVALID TAGS'
@@ -343,6 +348,8 @@ def submit():
                 launch_submit(ltags, ltagsgalaxies, paste_content, UUID, password ,True)
 
                 return render_template("submiting.html",
+                                            active_taxonomies = active_taxonomies,
+                                            active_galaxies = active_galaxies,
                                             UUID = UUID)
 
             else:
@@ -363,6 +370,8 @@ def submit():
             launch_submit(ltags, ltagsgalaxies, paste_content, UUID, password)
 
             return render_template("submiting.html",
+                                        active_taxonomies = active_taxonomies,
+                                        active_galaxies = active_galaxies,
                                         UUID = UUID)
 
         else:
diff --git a/var/www/modules/PasteSubmit/templates/PasteSubmit.html b/var/www/modules/PasteSubmit/templates/PasteSubmit.html
index 1ed4831f..44058214 100644
--- a/var/www/modules/PasteSubmit/templates/PasteSubmit.html
+++ b/var/www/modules/PasteSubmit/templates/PasteSubmit.html
@@ -20,7 +20,7 @@
           <script src="{{ url_for('static', filename='js/jquery.flot.js') }}"></script>
           <script src="{{ url_for('static', filename='js/jquery.flot.pie.js') }}"></script>
           <script src="{{ url_for('static', filename='js/jquery.flot.time.js') }}"></script>
-					<script src="/static//js/bootstrap.min.js"></script>
+					<script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
 					<script src="{{ url_for('static', filename='js/tags.js') }}"></script>
 
 	</head>
@@ -34,7 +34,7 @@
 
 
 
-	<form action="/PasteSubmit/submit" id="pasteSubmitForm" method="post" enctype=multipart/form-data onsubmit="submitPaste()">
+	<form action="{{ url_for('PasteSubmit.submit') }}" id="pasteSubmitForm" method="post" enctype=multipart/form-data onsubmit="submitPaste()">
 
 		<input type="hidden" id="tags_taxonomies" name="tags_taxonomies" value="test">
 		<input type="hidden" id="tags_galaxies" name="tags_galaxies" value="test">
diff --git a/var/www/modules/PasteSubmit/templates/edit_tag_export.html b/var/www/modules/PasteSubmit/templates/edit_tag_export.html
index 7921d1d7..04a506d6 100644
--- a/var/www/modules/PasteSubmit/templates/edit_tag_export.html
+++ b/var/www/modules/PasteSubmit/templates/edit_tag_export.html
@@ -15,10 +15,10 @@
 	 	<link href="{{ url_for('static', filename='css/dataTables.bootstrap.css') }}" rel="stylesheet" type="text/css" />
 	  <!-- JS -->
 	  <script type="text/javascript" src="{{ url_for('static', filename='js/dygraph-combined.js') }}"></script>
-	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js')}}"></script>
-		<script src="/static//js/bootstrap.min.js"></script>
-	  <script src="/static//js/jquery.dataTables.min.js"></script>
-	  <script src="/static//js/dataTables.bootstrap.js"></script>
+	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js') }}"></script>
+		<script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/jquery.dataTables.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/dataTables.bootstrap.js') }}"></script>
 
 		<style>
 			.tooltip-inner {
@@ -134,7 +134,7 @@
 				</div>
 			</div>
 
-      <form action="/PasteSubmit/tag_export_edited" id="checkboxForm" method='post'>
+      <form action="{{ url_for('PasteSubmit.tag_export_edited') }}" id="checkboxForm" method='post'>
 
 
 				<div class="container">
diff --git a/var/www/modules/PasteSubmit/templates/submiting.html b/var/www/modules/PasteSubmit/templates/submiting.html
index d7aa5716..b049120c 100644
--- a/var/www/modules/PasteSubmit/templates/submiting.html
+++ b/var/www/modules/PasteSubmit/templates/submiting.html
@@ -20,7 +20,7 @@
           <script src="{{ url_for('static', filename='js/jquery.flot.js') }}"></script>
           <script src="{{ url_for('static', filename='js/jquery.flot.pie.js') }}"></script>
           <script src="{{ url_for('static', filename='js/jquery.flot.time.js') }}"></script>
-					<script src="/static//js/bootstrap.min.js"></script>
+					<script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
 					<script src="{{ url_for('static', filename='js/tags.js') }}"></script>
 
 	<style>
@@ -49,7 +49,7 @@
 <div class="row">
 	<!-- /.col-lg-12 -->
 
-	<form action="/PasteSubmit/submit" id="pasteSubmitForm" method="post" enctype=multipart/form-data onsubmit="submitPaste()">
+	<form action="{{ url_for('PasteSubmit.submit') }}" id="pasteSubmitForm" method="post" enctype=multipart/form-data onsubmit="submitPaste()">
 
 		<input type="hidden" id="tags_taxonomies" name="tags_taxonomies" value="test">
 		<input type="hidden" id="tags_galaxies" name="tags_galaxies" value="test">
diff --git a/var/www/modules/Tags/templates/edit_galaxy.html b/var/www/modules/Tags/templates/edit_galaxy.html
index 0d1b1bf9..f6e8f365 100644
--- a/var/www/modules/Tags/templates/edit_galaxy.html
+++ b/var/www/modules/Tags/templates/edit_galaxy.html
@@ -12,13 +12,13 @@
 	  <link href="{{ url_for('static', filename='css/bootstrap.min.css') }}" rel="stylesheet">
 	  <link href="{{ url_for('static', filename='font-awesome/css/font-awesome.css') }}" rel="stylesheet">
 	  <link href="{{ url_for('static', filename='css/sb-admin-2.css') }}" rel="stylesheet">
-	 <link href="/static//css/dataTables.bootstrap.css" rel="stylesheet" type="text/css" />
+	  <link href="{{ url_for('static', filename='css/dataTables.bootstrap.css') }}" rel="stylesheet" type="text/css" />
 	  <!-- JS -->
 	  <script type="text/javascript" src="{{ url_for('static', filename='js/dygraph-combined.js') }}"></script>
-	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js')}}"></script>
-		<script src="/static//js/bootstrap.min.js"></script>
-	  <script src="/static//js/jquery.dataTables.min.js"></script>
-	  <script src="/static//js/dataTables.bootstrap.js"></script>
+	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js') }}"></script>
+		<script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/jquery.dataTables.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/dataTables.bootstrap.js') }}"></script>
 
 		<style>
 			.tooltip-inner {
@@ -47,7 +47,7 @@
     <div id="page-wrapper">
 			<div class="row">
 				<div class="col-lg-12">
-          <a href="/Tags/galaxies" class="btn btn-light pull-left">
+          <a href="{{ url_for('Tags.galaxies') }}" class="btn btn-light pull-left">
             <i class="fa fa-arrow-left fa"></i> List Galaxies
           </a>
 				</div>
@@ -83,7 +83,7 @@
         </div>
       </div>
 
-      <form action="/Tags/edit_galaxy_tag" id="checkboxForm">
+      <form action="{{ url_for('Tags.edit_galaxy_tag') }}" id="checkboxForm">
 				<input type="hidden" value="{{ id }}" name="galaxy" />
 
 
diff --git a/var/www/modules/Tags/templates/edit_taxonomie.html b/var/www/modules/Tags/templates/edit_taxonomie.html
index 0409185f..30826c5a 100644
--- a/var/www/modules/Tags/templates/edit_taxonomie.html
+++ b/var/www/modules/Tags/templates/edit_taxonomie.html
@@ -16,9 +16,9 @@
 	  <!-- JS -->
 	  <script type="text/javascript" src="{{ url_for('static', filename='js/dygraph-combined.js') }}"></script>
 	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js')}}"></script>
-		<script src="/static//js/bootstrap.min.js"></script>
-	  <script src="/static//js/jquery.dataTables.min.js"></script>
-	  <script src="/static//js/dataTables.bootstrap.js"></script>
+		<script src="{{ url_for('static', filename='js/bootstrap.min.js')}}"></script>
+		<script src="{{ url_for('static', filename='js/dataTables.bootstrap.js')}}"></script>
+	  <script src="{{ url_for('static', filename='js/jquery.dataTables.min.js')}}"></script>
 
 		<style>
 			.tooltip-inner {
@@ -47,7 +47,7 @@
     <div id="page-wrapper">
 			<div class="row">
 				<div class="col-lg-12">
-          <a href="/Tags/taxonomies" class="btn btn-light pull-left">
+          <a href="{{ url_for('Tags.taxonomies') }}" class="btn btn-light pull-left">
             <i class="fa fa-arrow-left fa"></i> List Taxonomies
           </a>
 				</div>
@@ -83,7 +83,7 @@
         </div>
       </div>
 
-      <form action="/Tags/edit_taxonomie_tag" id="checkboxForm">
+      <form action="{{ url_for('Tags.edit_taxonomie_tag') }}" id="checkboxForm">
 				<input type="hidden" value="{{ id }}" name="taxonomie" />
 
 
diff --git a/var/www/modules/Tags/templates/galaxies.html b/var/www/modules/Tags/templates/galaxies.html
index 01c42e77..ea89c920 100644
--- a/var/www/modules/Tags/templates/galaxies.html
+++ b/var/www/modules/Tags/templates/galaxies.html
@@ -15,10 +15,10 @@
 	 	<link href="{{ url_for('static', filename='css/dataTables.bootstrap.css') }}" rel="stylesheet" type="text/css" />
 	  <!-- JS -->
 	  <script type="text/javascript" src="{{ url_for('static', filename='js/dygraph-combined.js') }}"></script>
-	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js')}}"></script>
-		<script src="/static//js/bootstrap.min.js"></script>
-	  <script src="/static//js/jquery.dataTables.min.js"></script>
-	  <script src="/static//js/dataTables.bootstrap.js"></script>
+	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js') }}"></script>
+		<script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/jquery.dataTables.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/dataTables.bootstrap.js') }}"></script>
 
 		<style>
 			.tooltip-inner {
diff --git a/var/www/modules/Tags/templates/tag_galaxy_info.html b/var/www/modules/Tags/templates/tag_galaxy_info.html
index 53759cbe..7f60e2e8 100644
--- a/var/www/modules/Tags/templates/tag_galaxy_info.html
+++ b/var/www/modules/Tags/templates/tag_galaxy_info.html
@@ -15,10 +15,10 @@
 	 	<link href="{{ url_for('static', filename='css/dataTables.bootstrap.css') }}" rel="stylesheet" type="text/css" />
 	  <!-- JS -->
 	  <script type="text/javascript" src="{{ url_for('static', filename='js/dygraph-combined.js') }}"></script>
-	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js')}}"></script>
-		<script src="/static//js/bootstrap.min.js"></script>
-	  <script src="/static//js/jquery.dataTables.min.js"></script>
-	  <script src="/static//js/dataTables.bootstrap.js"></script>
+	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js') }}"></script>
+		<script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/jquery.dataTables.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/dataTables.bootstrap.js') }}"></script>
 
 		<style>
 			.tooltip-inner {
diff --git a/var/www/modules/Tags/templates/tagged.html b/var/www/modules/Tags/templates/tagged.html
index 044defdf..75be817f 100644
--- a/var/www/modules/Tags/templates/tagged.html
+++ b/var/www/modules/Tags/templates/tagged.html
@@ -9,15 +9,15 @@
   <link rel="icon" href="{{ url_for('static', filename='image/ail-icon.png') }}">
 
   <!-- Core CSS -->
-  <link href="/static//css/bootstrap.min.css" rel="stylesheet">
-  <link href="/static//font-awesome/css/font-awesome.css" rel="stylesheet">
-  <link href="/static//css/sb-admin-2.css" rel="stylesheet">
-  <link href="/static//css/dataTables.bootstrap.css" rel="stylesheet" type="text/css" />
+  <link href="{{ url_for('static', filename='css/bootstrap.min.css') }}" rel="stylesheet">
+  <link href="{{ url_for('static', filename='font-awesome/css/font-awesome.css') }}" rel="stylesheet">
+  <link href="{{ url_for('static', filename='css/sb-admin-2.css') }}" rel="stylesheet">
+  <link href="{{ url_for('static', filename='css/dataTables.bootstrap.css') }}" rel="stylesheet" type="text/css" />
   <link href="{{ url_for('static', filename='css/tags.css') }}" rel="stylesheet" type="text/css" />
-  <script language="javascript" src="/static//js/jquery.js"></script>
-  <script src="/static//js/bootstrap.min.js"></script>
-  <script src="/static//js/jquery.dataTables.min.js"></script>
-  <script src="/static//js/dataTables.bootstrap.js"></script>
+  <script src="{{ url_for('static', filename='js/jquery.js') }}"></script>
+  <script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
+  <script src="{{ url_for('static', filename='js/jquery.dataTables.min.js') }}"></script>
+  <script src="{{ url_for('static', filename='js/dataTables.bootstrap.js') }}"></script>
   <script src="{{ url_for('static', filename='js/tags.js') }}"></script>
 
   <style>
@@ -128,7 +128,7 @@
     <div id="div_stil_data">
       <button id="load_more_json_button1" type="button" class="btn btn-default" onclick="add_entries(100)" style="display: True">Load 100 entries</button>
       <button id="load_more_json_button2" type="button" class="btn btn-warning" onclick="add_entries(300)" style="display: True">Load 300 entries</button>
-      <img id="loading_gif_browse" src="/static//image/loading.gif" heigt="20" width="20" style="margin: 2px;"></div>
+      <img id="loading_gif_browse" src="{{url_for('static', filename='image/loading.gif') }}" heigt="20" width="20" style="margin: 2px;"></div>
       </br>
 
       <div>
diff --git a/var/www/modules/Tags/templates/taxonomies.html b/var/www/modules/Tags/templates/taxonomies.html
index 1d928bc9..22090dcd 100644
--- a/var/www/modules/Tags/templates/taxonomies.html
+++ b/var/www/modules/Tags/templates/taxonomies.html
@@ -15,10 +15,10 @@
 	  <link href="{{ url_for('static', filename='css/dataTables.bootstrap.css') }}" rel="stylesheet" type="text/css" />
 	  <!-- JS -->
 	  <script type="text/javascript" src="{{ url_for('static', filename='js/dygraph-combined.js') }}"></script>
-	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js')}}"></script>
-		<script src="/static//js/bootstrap.min.js"></script>
-	  <script src="/static//js/jquery.dataTables.min.js"></script>
-	  <script src="/static//js/dataTables.bootstrap.js"></script>
+	  <script language="javascript" src="{{ url_for('static', filename='js/jquery.js') }}"></script>
+		<script src="{{ url_for('static', filename='js/bootstrap.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/jquery.dataTables.min.js') }}"></script>
+	  <script src="{{ url_for('static', filename='js/dataTables.bootstrap.js') }}"></script>
 
 		<style>
 			.tooltip-inner {
diff --git a/var/www/modules/dashboard/templates/searchbox.html b/var/www/modules/dashboard/templates/searchbox.html
index b2513ee8..fd4cfb8e 100644
--- a/var/www/modules/dashboard/templates/searchbox.html
+++ b/var/www/modules/dashboard/templates/searchbox.html
@@ -1,5 +1,5 @@
                           <div class="input-group custom-search-form">
-                              <form action="/search" id="form-search" method=POST>
+                              <form action="{{ url_for('searches.search') }}" id="form-search" method=POST>
                                 <input type="text" name="query" class="form-control" placeholder="Search Paste">
                                 <input type="hidden" name="index_name" class="form-control" value="0" placeholder="Index Name">
                                 <span class="input-group-btn">
diff --git a/var/www/modules/hashDecoded/Flask_hashDecoded.py b/var/www/modules/hashDecoded/Flask_hashDecoded.py
index 6819ff09..faf6af34 100644
--- a/var/www/modules/hashDecoded/Flask_hashDecoded.py
+++ b/var/www/modules/hashDecoded/Flask_hashDecoded.py
@@ -279,7 +279,7 @@ def showHash():
                                 first_seen=first_seen, list_hash_decoder=list_hash_decoder,
                                 last_seen=last_seen, nb_seen_in_all_pastes=nb_seen_in_all_pastes, sparkline_values=sparkline_values)
 
-@app.route('/hashDecoded/downloadHash')
+@hashDecoded.route('/hashDecoded/downloadHash')
 def downloadHash():
     hash = request.args.get('hash')
     # sanitize hash
diff --git a/var/www/modules/hashDecoded/templates/hashDecoded.html b/var/www/modules/hashDecoded/templates/hashDecoded.html
index 1d0fb808..995ecad9 100644
--- a/var/www/modules/hashDecoded/templates/hashDecoded.html
+++ b/var/www/modules/hashDecoded/templates/hashDecoded.html
@@ -90,7 +90,7 @@
 								<div class="panel panel-info" style="text-align:center;">
 									<div class="panel-heading">
 										Select a date range :
-										<form action="/hashDecoded/all_hash_search" id="hash_selector_form" method='post'>
+										<form action="{{ url_for('hashDecoded.all_hash_search') }}" id="hash_selector_form" method='post'>
 											<div class="input-group">
 												<span class="input-group-addon"><i class="fa fa-calendar  fa" aria-hidden="true"></i></span>
 												<input class="form-control" id="date-range-from" placeholder="yyyy-mm-dd" value="{{ date_from }}" name="date_from">
@@ -374,13 +374,13 @@ function barchart_type_stack(url, id) {
 				.selectAll("text")
 					.attr("class", "bar")
 					{% if  date_from|string == date_to|string and type is none %}
-						.on("click", function (d) { window.location.href = '/hashDecoded/?date_from={{date_from}}&date_to={{date_to}}&type='+d })
+						.on("click", function (d) { window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}?date_from={{date_from}}&date_to={{date_to}}&type="+d })
 						.attr("transform", "rotate(-18)" )
 					{% elif  date_from|string == date_to|string and type is not none %}
-						.on("click", function (d) { window.location.href = '/hashDecoded/?date_from='+d+'&date_to='+d })
+						.on("click", function (d) { window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}?date_from="+d+'&date_to='+d })
 						.attr("transform", "rotate(-18)" )
 					{% else %}
-						.on("click", function (d) { window.location.href = '/hashDecoded/?date_from='+d+'&date_to='+d })
+						.on("click", function (d) { window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}?date_from="+d+'&date_to='+d })
 						.attr("transform", "rotate(-40)" )
 					{% endif %}
 					.style("text-anchor", "end");
@@ -412,11 +412,11 @@ function barchart_type_stack(url, id) {
 	      .on("mouseover", function (d) { showPopover.call(this, d); })
 				.on("mouseout", function (d) { removePopovers(); })
 				{% if  date_from|string == date_to|string and type is none %}
-					.on("click", function(d){ window.location.href = "/hashDecoded/" +'?date_from={{date_from}}&date_to={{date_to}}&type='+d.label+'&encoding='+d.name; });
+					.on("click", function(d){ window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}" +'?date_from={{date_from}}&date_to={{date_to}}&type='+d.label+'&encoding='+d.name; });
 				{% elif  date_from|string == date_to|string and type is not none %}
-					.on("click", function(d){ window.location.href = "/hashDecoded/" +'?type={{type}}&date_from='+d.label+'&date_to='+d.label+'&encoding='+d.name; });
+					.on("click", function(d){ window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}" +'?type={{type}}&date_from='+d.label+'&date_to='+d.label+'&encoding='+d.name; });
 				{% else %}
-					.on("click", function(d){ window.location.href = "/hashDecoded/" +'?type='+ d.name +'&date_from='+d.label+'&date_to='+d.label; });
+					.on("click", function(d){ window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}" +'?type='+ d.name +'&date_from='+d.label+'&date_to='+d.label; });
 				{% endif %}
 
 				data.forEach(function(d) {
@@ -424,15 +424,14 @@ function barchart_type_stack(url, id) {
 						svg.append("text")
 								.attr("class", "bar")
 								.attr("dy", "-.35em")
-								//.on("click", (window.location.href = "/hashDecoded/"+'?date_from='+d.date) )
 								.attr('x', x(d.date) + x.bandwidth()/2)
 								.attr('y', y(d.total))
 								{% if  date_from|string == date_to|string and type is none %}
-									.on("click", function () {window.location.href = "/hashDecoded/"+'?date_from={{date_from}}&date_to={{date_to}}&type='+d.date })
+									.on("click", function () {window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}"+'?date_from={{date_from}}&date_to={{date_to}}&type='+d.date })
 								{% elif  date_from|string == date_to|string and type is not none %}
-									.on("click", function () {window.location.href = '/hashDecoded/?type={{type}}&date_from='+d.date+'&date_to='+d.date })
+									.on("click", function () {window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}?type={{type}}&date_from="+d.date+'&date_to='+d.date })
 								{% else %}
-									.on("click", function () {window.location.href = "/hashDecoded/"+'?date_from='+d.date+'&date_to='+d.date })
+									.on("click", function () {window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}"+'?date_from='+d.date+'&date_to='+d.date })
 								{% endif %}
 								.style("text-anchor", "middle")
 								.text(d.total);
@@ -545,7 +544,7 @@ d3.json("{{ url_for('hashDecoded.decoder_type_json') }}?date_from={{date_from}}&
 			.attr('class', 'pie_path')
 			.on("mouseover", mouseovered_pie)
 			.on("mouseout", mouseouted_pie)
-			.on("click", function (d) {window.location.href = '/hashDecoded/?date_from={{date_from}}&date_to={{date_to}}&type={{type}}&encoding='+d.data.name })
+			.on("click", function (d) {window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}?date_from={{date_from}}&date_to={{date_to}}&type={{type}}&encoding="+d.data.name })
 		  .style('opacity', opacity_pie)
 		  .style('stroke', 'white');
 	});
@@ -626,7 +625,7 @@ function barchart_type(url, id) {
 						{% else %}
 						.attr("transform", "rotate(-70)" )
 						.attr("class", "bar")
-						.on("click", function (d) { window.location.href = "/hashDecoded/"+'?date_from='+d+'&date_to='+d });
+						.on("click", function (d) { window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}"+'?date_from='+d+'&date_to='+d });
 						{% endif %}
 
         svg.append("g")
@@ -649,10 +648,10 @@ function barchart_type(url, id) {
             .attr("y", function(d) { return y(d.value); })
             .attr("height", function(d) { return height - y(d.value); })
 						{% if  type %}
-            .on("click", function(d){ window.location.href = "/hashDecoded/" +'?type={{type}}&date_from='+ d.date +'&date_to='+ d.date; });
+            .on("click", function(d){ window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}" +'?type={{type}}&date_from='+ d.date +'&date_to='+ d.date; });
 						{% endif  %}
 						{% if  daily_type_chart %}
-						.on("click", function(d){ window.location.href = "/hashDecoded/" +'?type='+d.date+'&date_from={{ daily_date }}&date_to={{ daily_date }}'; });
+						.on("click", function(d){ window.location.href = "{{ url_for('hashDecoded.hashDecoded_page') }}" +'?type='+d.date+'&date_from={{ daily_date }}&date_to={{ daily_date }}'; });
 						{% endif  %}
 
 
diff --git a/var/www/modules/hashDecoded/templates/showHash.html b/var/www/modules/hashDecoded/templates/showHash.html
index 57a72ca5..b0bcaa50 100644
--- a/var/www/modules/hashDecoded/templates/showHash.html
+++ b/var/www/modules/hashDecoded/templates/showHash.html
@@ -151,7 +151,7 @@
 									Virus Total submission is disabled
 								{% endif %}
 
-								<a href="/hashDecoded/downloadHash?hash={{hash}}" target="blank">
+								<a href="{{ url_for('hashDecoded.downloadHash') }}?hash={{hash}}" target="blank">
 									<button class='btn btn-info pull-right'><i id="flash-tld" class="glyphicon glyphicon-download-alt " flash-tld=""></i> Download Hashed file
 									</button>
 								</a>
diff --git a/var/www/modules/showpaste/templates/show_saved_paste.html b/var/www/modules/showpaste/templates/show_saved_paste.html
index 2a92f6ce..cb99637c 100644
--- a/var/www/modules/showpaste/templates/show_saved_paste.html
+++ b/var/www/modules/showpaste/templates/show_saved_paste.html
@@ -215,7 +215,7 @@
                 </div>
                 <div class="modal-body">
 
-                  <form method="post" action="/PasteSubmit/create_misp_event"target="_blank">
+                  <form method="post" action="{{ url_for('PasteSubmit.create_misp_event') }}" target="_blank">
 
                   <div class="input select required">
                     <label for="EventDistribution">Distribution</label>
@@ -293,7 +293,7 @@
 
                 <div class="modal-body">
 
-                  <form method="post" action="/PasteSubmit/create_hive_case" target="_blank">
+                  <form method="post" action="{{ url_for('PasteSubmit.create_hive_case') }}" target="_blank">
 
                   <div class="input clear required">
                     <label for="EventThreatLevelId">Threat Level</label>