jcoffey-dev
bd6a605d61
Takes the flat module count from 66 to 42, continuing what admin/ and
calendar/ started.
lib/mailbox/ archiveDate, emptyFolder, folderMove, labelTree,
mailboxName, mailboxRoute
lib/sieve/ sieve, sieveApply, sieveFolders
lib/input/ keyboard, swipe, touch, listSelection, dropUpload
lib/notify/ notify, webpush, webpushEnable
lib/sw/ swCache, swFacts, staleBuild
lib/text/ html, markdown, text, emlName
FOUR THINGS THE FILENAMES GET WRONG, each checked by reading the file
rather than trusting what it is called:
- appFolder is not a mailbox. It is the `ihasmail` folder in JMAP
*Files*, where the client keeps signature images and synced settings.
It stays flat.
- format holds no formatting of text. It re-exports the date and clock
formatters, so it belongs with dates/datetime, not with text/.
- preview is the file viewer deciding what it can show without
downloading, and source is where to point someone asking for this
instance's AGPL source. Neither is about text.
- notify is not Web Push. It is the tab title, the favicon badge and
the new-mail sound -- in-app notification, which is why it sits with
webpush rather than under sw/ with the service worker's own concerns.
threadScroll stays flat too: it decides where a conversation opens, which
is view state rather than a gesture, and input/ is honest only if
everything in it interprets something the reader did.
No behavior change. Almost every reference was on the @/ alias; eight
relative imports in files that did not move, or that moved away from a
sibling, needed rewriting by hand.
73 lines
3.1 KiB
TypeScript
73 lines
3.1 KiB
TypeScript
import DOMPurify from "dompurify";
|
|
import { marked } from "marked";
|
|
|
|
/**
|
|
* Markdown, rendered for the file viewer.
|
|
*
|
|
* The source is somebody else's file -- uploaded, or shared into the account
|
|
* by another user -- so it is treated as hostile. Markdown is not a safe
|
|
* subset of anything: raw HTML passes straight through it by design, so
|
|
* `<script>` in a .md is a script tag unless something takes it out. That
|
|
* something is DOMPurify, which the app already carries for mail.
|
|
*
|
|
* Rendered inline rather than in a shadow root the way mail bodies are: this
|
|
* output is ours, sanitized and styled by `.md-body`, where an email arrives
|
|
* with a design of its own that has to be quarantined from the app's.
|
|
*/
|
|
|
|
marked.use({ gfm: true, breaks: false });
|
|
|
|
export function isMarkdown(type: string | null | undefined, name: string | null | undefined): boolean {
|
|
const t = (type ?? "").split(";")[0]!.trim().toLowerCase();
|
|
if (t === "text/markdown" || t === "text/x-markdown") return true;
|
|
// A .md upload usually arrives as application/octet-stream, so the name is
|
|
// the only evidence -- the same reason previewKind falls back to it.
|
|
return /\.(md|markdown|mdown|mkd)$/i.test(name ?? "");
|
|
}
|
|
|
|
export function renderMarkdown(source: string): string {
|
|
const html = marked.parse(source, { async: false });
|
|
const clean = DOMPurify.sanitize(html, {
|
|
WHOLE_DOCUMENT: false,
|
|
RETURN_DOM: true,
|
|
USE_PROFILES: { html: true },
|
|
FORBID_TAGS: ["script", "iframe", "frame", "frameset", "object", "embed", "applet", "form", "input", "button", "textarea", "select", "meta", "link", "base", "svg", "math", "video", "audio", "source", "track", "canvas", "template", "noscript", "style"],
|
|
FORBID_ATTR: ["srcdoc", "formaction", "action", "ping", "autofocus", "style"],
|
|
ALLOW_DATA_ATTR: false,
|
|
ADD_ATTR: ["target", "rel"],
|
|
}) as unknown as HTMLElement;
|
|
|
|
/*
|
|
* Pictures become links rather than pictures.
|
|
*
|
|
* An image in a Markdown file is either a relative path, which has no base
|
|
* to resolve against here and would render broken, or a URL somewhere else,
|
|
* which fetches on open and tells that server the file was read -- the same
|
|
* tracking pixel this app blocks in mail. Neither is worth rendering. A link
|
|
* keeps the alt text and the address visible, so nothing vanishes silently
|
|
* and the reader chooses whether to fetch it.
|
|
*/
|
|
for (const img of [...clean.querySelectorAll("img")]) {
|
|
const href = img.getAttribute("src") ?? "";
|
|
const label = img.getAttribute("alt") || href || "image";
|
|
const a = clean.ownerDocument.createElement("a");
|
|
a.className = "md-img";
|
|
a.textContent = label;
|
|
if (/^https?:/i.test(href)) {
|
|
a.setAttribute("href", href);
|
|
a.setAttribute("target", "_blank");
|
|
a.setAttribute("rel", "noopener noreferrer");
|
|
a.setAttribute("title", href);
|
|
}
|
|
img.replaceWith(a);
|
|
}
|
|
|
|
// Links leave the app, so they leave it safely.
|
|
for (const a of clean.querySelectorAll("a[href]")) {
|
|
a.setAttribute("target", "_blank");
|
|
a.setAttribute("rel", "noopener noreferrer");
|
|
}
|
|
|
|
return clean.innerHTML;
|
|
}
|