# frozen_string_literal: true require 'singleton' require_relative './sanitize_config' class HTMLRenderer < Redcarpet::Render::HTML def block_code(code, language) "
#{encode(code).gsub("\n", "
")}
" end def autolink(link, link_type) return link if link_type == :email Formatter.instance.link_url(link) end private def html_entities @html_entities ||= HTMLEntities.new end def encode(html) html_entities.encode(html) end end class Formatter include Singleton include RoutingHelper include ActionView::Helpers::TextHelper BBCODE_TAGS = { :url => { :html_open => '', :html_close => '', :description => '', :example => '', :allow_quick_param => true, :allow_between_as_param => false, :quick_param_format => /(\S+)/, :quick_param_format_description => 'The size parameter \'%param%\' is incorrect, a number is expected', :param_tokens => [{:token => :url}] }, :ul => { :html_open => '', :description => '', :example => '', }, :ol => { :html_open => '
    ', :html_close => '
', :description => '', :example => '', }, :li => { :html_open => '
  • ', :html_close => '
  • ', :description => '', :example => '', }, :sub => { :html_open => '', :html_close => '', :description => '', :example => '', }, :sup => { :html_open => '', :html_close => '', :description => '', :example => '', }, :h1 => { :html_open => '

    ', :html_close => '

    ', :description => '', :example => '', }, :h2 => { :html_open => '

    ', :html_close => '

    ', :description => '', :example => '', }, :h3 => { :html_open => '

    ', :html_close => '

    ', :description => '', :example => '', }, :h4 => { :html_open => '

    ', :html_close => '

    ', :description => '', :example => '', }, :h5 => { :html_open => '
    ', :html_close => '
    ', :description => '', :example => '', }, :h6 => { :html_open => '
    ', :html_close => '
    ', :description => '', :example => '', }, :abbr => { :html_open => '', :html_close => '', :description => '', :example => '', }, :hr => { :html_open => '
    ', :html_close => '', :description => '', :example => '', }, :b => { :html_open => '', :html_close => '', :description => '', :example => '', }, :i => { :html_open => '', :html_close => '', :description => '', :example => '', }, :flip => { :html_open => '', :html_close => '', :description => '', :example => '', :allow_quick_param => true, :allow_between_as_param => false, :quick_param_format => /(h|v)/, :quick_param_format_description => 'The size parameter \'%param%\' is incorrect, a number is expected', :param_tokens => [{:token => :direction}] }, :size => { :html_open => '', :html_close => '', :description => '', :example => '', :allow_quick_param => true, :allow_between_as_param => false, :quick_param_format => /([1-6])/, :quick_param_format_description => 'The size parameter \'%param%\' is incorrect, a number is expected', :param_tokens => [{:token => :size}] }, :quote => { :html_open => '
    ', :html_close => '
    ', :description => '', :example => '', }, :kbd => { :html_open => '
    ', :html_close => '
    ', :description => '', :example => '', }, :code => { :html_open => '
    ', :html_close => '
    ', :description => '', :example => '', }, :u => { :html_open => '', :html_close => '', :description => '', :example => '', }, :s => { :html_open => '', :html_close => '', :description => '', :example => '', }, :del => { :html_open => '', :html_close => '', :description => '', :example => '', }, :left => { :html_open => '', :html_close => '', :description => '', :example => '', }, :center => { :html_open => '', :html_close => '', :description => '', :example => '', }, :right => { :html_open => '', :html_close => '', :description => '', :example => '', }, :lfloat => { :html_open => '', :html_close => '', :description => '', :example => '', }, :rfloat => { :html_open => '', :html_close => '', :description => '', :example => '', }, :spoiler => { :html_open => '', :html_close => '', :description => '', :example => '', }, } def format(status, **options) if status.reblog? prepend_reblog = status.reblog.account.acct status = status.proper else prepend_reblog = false end raw_content = status.text if options[:inline_poll_options] && status.preloadable_poll raw_content = raw_content + "\n\n" + status.preloadable_poll.options.map { |title| "[ ] #{title}" }.join("\n") end return '' if raw_content.blank? unless status.local? html = reformat(raw_content) html = encode_custom_emojis(html, status.emojis, options[:autoplay]) if options[:custom_emojify] return html.html_safe # rubocop:disable Rails/OutputSafety end linkable_accounts = status.active_mentions.map(&:account) linkable_accounts << status.account html = raw_content html = "RT @#{prepend_reblog} #{html}" if prepend_reblog case status.content_type when 'text/markdown' html = format_markdown(html) when 'text/x-bbcode' html = format_bbcode(html) when 'text/x-bbcode+markdown' html = format_bbdown(html) end html = encode_and_link_urls(html, linkable_accounts, keep_html: %w(text/markdown text/x-bbcode text/x-bbcode+markdown text/html).include?(status.content_type)) html = encode_custom_emojis(html, status.emojis, options[:autoplay]) if options[:custom_emojify] unless %w(text/markdown text/x-bbcode text/x-bbcode+markdown text/html).include?(status.content_type) html = simple_format(html, {}, sanitize: false) html = html.delete("\n") end unless status.footer.blank? footer = status.footer footer = encode_and_link_urls(footer) footer = encode_custom_emojis(footer, status.emojis, options[:autoplay]) if options[:custom_emojify] html = "#{html.strip}

    — #{footer}

    " end html.html_safe # rubocop:disable Rails/OutputSafety end def format_markdown(html) html = reformat(markdown_formatter.render(html)) html.delete("\r").delete("\n") end def format_bbcode(html, sanitize = true) html = bbcode_formatter(html) html = html.gsub(/
    .*<\/hr>/im, '
    ') return html unless sanitize html = reformat(html) html.delete("\r").delete("\n") end def format_bbdown(html) html = format_bbcode(html, false) html = html.gsub(/
    |
    /, '') format_markdown(html) end def reformat(html) sanitize(html, Sanitize::Config::MASTODON_STRICT) end def plaintext(status) return status.text if status.local? text = status.text.gsub(/(
    |
    |<\/p>)+/) { |match| "#{match}\n" } strip_tags(text) end def simplified_format(account, **options) return reformat(account.note) unless account.local? html = format_bbdown(account.note) html = encode_and_link_urls(html, keep_html: true) html = encode_custom_emojis(html, account.emojis, options[:autoplay]) if options[:custom_emojify] html.html_safe # rubocop:disable Rails/OutputSafety end def sanitize(html, config) Sanitize.fragment(html, config) end def format_spoiler(status, **options) html = encode(status.spoiler_text) html = encode_custom_emojis(html, status.emojis, options[:autoplay]) html.html_safe # rubocop:disable Rails/OutputSafety end def format_poll_option(status, option, **options) html = encode(option.title) html = encode_custom_emojis(html, status.emojis, options[:autoplay]) html.html_safe # rubocop:disable Rails/OutputSafety end def format_display_name(account, **options) html = encode(account.display_name.presence || account.username) html = encode_custom_emojis(html, account.emojis, options[:autoplay]) if options[:custom_emojify] html.html_safe # rubocop:disable Rails/OutputSafety end def format_field(account, str, **options) return reformat(str).html_safe unless account.local? # rubocop:disable Rails/OutputSafety html = encode_and_link_urls(str, me: true) html = encode_custom_emojis(html, account.emojis, options[:autoplay]) if options[:custom_emojify] html.html_safe # rubocop:disable Rails/OutputSafety end def linkify(text) html = encode_and_link_urls(text) html = simple_format(html, {}, sanitize: false) html = html.delete("\n") html.html_safe # rubocop:disable Rails/OutputSafety end def link_url(url) "#{link_html(url)}" end private def bbcode_formatter(html) begin html = html.bbcode_to_html(false, BBCODE_TAGS, :enable, *BBCODE_TAGS.keys) rescue Exception => e end html end def markdown_formatter return @markdown_formatter if defined?(@markdown_formatter) extensions = { autolink: true, no_intra_emphasis: true, fenced_code_blocks: true, disable_indented_code_blocks: true, strikethrough: true, lax_spacing: true, space_after_headers: true, superscript: true, underline: true, highlight: true, footnotes: false, } renderer = HTMLRenderer.new({ filter_html: false, escape_html: false, no_images: true, no_styles: true, safe_links_only: true, hard_wrap: true, link_attributes: { target: '_blank', rel: 'nofollow noopener' }, }) @markdown_formatter = Redcarpet::Markdown.new(renderer, extensions) end def html_entities @html_entities ||= HTMLEntities.new end def encode(html) html_entities.encode(html) end def encode_and_link_urls(html, accounts = nil, options = {}) if accounts.is_a?(Hash) options = accounts accounts = nil end entities = options[:keep_html] ? html_friendly_extractor(html) : utf8_friendly_extractor(html, extract_url_without_protocol: false) rewrite(html.dup, entities, options[:keep_html]) do |entity| if entity[:url] link_to_url(entity, options) elsif entity[:hashtag] link_to_hashtag(entity) elsif entity[:screen_name] link = link_to_pseudo(entity[:screen_name]) link.nil? ? link_to_mention(entity, accounts) : link end end end def count_tag_nesting(tag) if tag[1] == '/' then -1 elsif tag[-2] == '/' then 0 else 1 end end def encode_custom_emojis(html, emojis, animate = false) return html if emojis.empty? emoji_map = if animate emojis.each_with_object({}) { |e, h| h[e.shortcode] = full_asset_url(e.image.url) } else emojis.each_with_object({}) { |e, h| h[e.shortcode] = full_asset_url(e.image.url(:static)) } end i = -1 tag_open_index = nil inside_shortname = false shortname_start_index = -1 invisible_depth = 0 while i + 1 < html.size i += 1 if invisible_depth.zero? && inside_shortname && html[i] == ':' shortcode = html[shortname_start_index + 1..i - 1] emoji = emoji_map[shortcode] if emoji replacement = "\":#{encode(shortcode)}:\"" before_html = shortname_start_index.positive? ? html[0..shortname_start_index - 1] : '' html = before_html + replacement + html[i + 1..-1] i += replacement.size - (shortcode.size + 2) - 1 else i -= 1 end inside_shortname = false elsif tag_open_index && html[i] == '>' tag = html[tag_open_index..i] tag_open_index = nil if invisible_depth.positive? invisible_depth += count_tag_nesting(tag) elsif tag == '