Andrew S Erwin
4e421f6ea2
release gate / check (push) Failing after 6m43s
High severity: - wire TRUSTED_PROXY through Compose/deploy/docs and warn at web startup - bucket public rate limits on effective client IP, add per-bookmark budget, and forward the signed browser identity from the share page - disable first-run bootstrap in server deployments and document seeding - serialize last-admin demotion in one advisory-locked transaction Medium/low: - cap and batch share recipient inserts - add a shared outbound budget for preview/CardDAV/IMAP/signal work - pin CardDAV dials to 443 and bound IMAP logout - fix rightward kanban column drags and normalize cards on column delete - classify backend outages in auth guards, add request timeouts and an error boundary, remove the dead login route, surface throttling - enforce pinned/unpinned page reorder grouping server-side - avoid preview work for stale bookmark versions; drop duplicate dialog fetch - sequence-guard collection/tag/calendar/quick-find loads - validate property config and fix MULTI_SELECT/DATE filter inputs - document index maintenance; apply same-origin check to sign-out - trim signup names, unique shared dates and kanban keys (migration 010), reset reference cache on identity changes, hide OIDC issuer, return 413 for oversized direct bodies, escape Markdown link destinations - remove dead template files and duplicate test helper Verified with go build/vet, full PostgreSQL race suite, db convergence, tsc, both ESLint configs and a Next production build.
93 lines
2.5 KiB
Go
93 lines
2.5 KiB
Go
package markdown
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/andrew/go-computer/internal/db"
|
|
"net/http"
|
|
"regexp"
|
|
"strings"
|
|
)
|
|
|
|
var slugRE = regexp.MustCompile(`[^a-z0-9]+`)
|
|
|
|
func Slugify(s string) string {
|
|
s = strings.Trim(slugRE.ReplaceAllString(strings.ToLower(s), "-"), "-")
|
|
if len(s) > 60 {
|
|
s = s[:60]
|
|
}
|
|
if s == "" {
|
|
s = "untitled"
|
|
}
|
|
return s
|
|
}
|
|
func text(b db.Object, k string) string { s, _ := b[k].(string); return s }
|
|
func BookmarkDocument(b db.Object) string {
|
|
title := text(b, "title")
|
|
if title == "" {
|
|
title = text(b, "url")
|
|
}
|
|
out := "# " + title + "\n\n- URL: " + text(b, "url") + "\n"
|
|
if s := text(b, "dueDate"); len(s) >= 10 {
|
|
out += "- Date: " + s[:10] + "\n"
|
|
}
|
|
tags := []string{}
|
|
if a, ok := b["tags"].([]any); ok {
|
|
for _, x := range a {
|
|
bt, _ := x.(map[string]any)
|
|
t, _ := bt["tag"].(map[string]any)
|
|
tags = append(tags, text(t, "name"))
|
|
}
|
|
}
|
|
if len(tags) > 0 {
|
|
out += "- Tags: " + strings.Join(tags, ", ") + "\n"
|
|
}
|
|
return out + "\n" + strings.TrimSpace(text(b, "notes")) + "\n"
|
|
}
|
|
|
|
// linkDestination wraps a URL in a CommonMark angle-bracket destination
|
|
// (review L-11). Parentheses (and the whitespace validURL accepts) no longer
|
|
// terminate the link, and the two characters that cannot appear unescaped
|
|
// inside <...> are percent-encoded.
|
|
func linkDestination(raw string) string {
|
|
escaped := strings.NewReplacer(
|
|
"<", "%3C",
|
|
">", "%3E",
|
|
"\r", "%0D",
|
|
"\n", "%0A",
|
|
).Replace(raw)
|
|
return "<" + escaped + ">"
|
|
}
|
|
|
|
func PageDocument(p db.Object) string {
|
|
out := "# " + text(p, "title") + "\n\n" + strings.TrimSpace(text(p, "content")) + "\n"
|
|
if a, ok := p["bookmarks"].([]any); ok && len(a) > 0 {
|
|
out += "\n## Links\n"
|
|
for _, x := range a {
|
|
pb, _ := x.(map[string]any)
|
|
b, _ := pb["bookmark"].(map[string]any)
|
|
title := text(b, "title")
|
|
if title == "" {
|
|
title = text(b, "url")
|
|
}
|
|
title = strings.NewReplacer("[", "", "]", "", "\n", " ").Replace(title)
|
|
desc := strings.Join(strings.Fields(text(b, "description")), " ")
|
|
rs := []rune(desc)
|
|
if len(rs) > 160 {
|
|
desc = string(rs[:160])
|
|
}
|
|
out += "- [" + title + "](" + linkDestination(text(b, "url")) + ")"
|
|
if desc != "" {
|
|
out += " — " + desc
|
|
}
|
|
out += "\n"
|
|
}
|
|
}
|
|
return out + "\n<!-- exported from computer " + text(p, "updatedAt") + " -->\n"
|
|
}
|
|
func Send(w http.ResponseWriter, body, name string) {
|
|
w.Header().Set("Content-Type", "text/markdown; charset=utf-8")
|
|
w.Header().Set("Content-Disposition", fmt.Sprintf(`attachment; filename="%s.md"`, Slugify(name)))
|
|
w.Header().Set("Cache-Control", "no-store")
|
|
_, _ = w.Write([]byte(body))
|
|
}
|