package web import ( "archive/zip" "bufio" "bytes" gojson "encoding/json" "errors" "fmt" "html/template" "net/url" "path/filepath" "regexp" "strconv" "strings" "time" "github.com/rs/zerolog/log" "github.com/thomiceli/opengist/internal/git" "github.com/thomiceli/opengist/internal/i18n" "github.com/thomiceli/opengist/internal/index" "github.com/thomiceli/opengist/internal/render" "github.com/thomiceli/opengist/internal/utils" "github.com/google/uuid" "github.com/labstack/echo/v4" "github.com/thomiceli/opengist/internal/config" "github.com/thomiceli/opengist/internal/db" "gorm.io/gorm" ) func gistInit(next echo.HandlerFunc) echo.HandlerFunc { return func(ctx echo.Context) error { currUser := getUserLogged(ctx) userName := ctx.Param("user") gistName := ctx.Param("gistname") switch filepath.Ext(gistName) { case ".js": setData(ctx, "gistpage", "js") gistName = strings.TrimSuffix(gistName, ".js") case ".json": setData(ctx, "gistpage", "json") gistName = strings.TrimSuffix(gistName, ".json") case ".git": setData(ctx, "gistpage", "git") gistName = strings.TrimSuffix(gistName, ".git") } gist, err := db.GetGist(userName, gistName) if err != nil { return notFound("Gist not found") } if gist.Private == db.PrivateVisibility { if currUser == nil || currUser.ID != gist.UserID { return notFound("Gist not found") } } setData(ctx, "gist", gist) if config.C.SshGit { var sshDomain string if config.C.SshExternalDomain != "" { sshDomain = config.C.SshExternalDomain } else { sshDomain = strings.Split(ctx.Request().Host, ":")[0] } if config.C.SshPort == "22" { setData(ctx, "sshCloneUrl", sshDomain+":"+userName+"/"+gistName+".git") } else { setData(ctx, "sshCloneUrl", "ssh://"+sshDomain+":"+config.C.SshPort+"/"+userName+"/"+gistName+".git") } } baseHttpUrl := getData(ctx, "baseHttpUrl").(string) if config.C.HttpGit { setData(ctx, "httpCloneUrl", baseHttpUrl+"/"+userName+"/"+gistName+".git") } setData(ctx, "httpCopyUrl", baseHttpUrl+"/"+userName+"/"+gistName) setData(ctx, "currentUrl", template.URL(ctx.Request().URL.Path)) setData(ctx, "embedScript", fmt.Sprintf(``, baseHttpUrl+"/"+userName+"/"+gistName+".js")) nbCommits, err := gist.NbCommits() if err != nil { return errorRes(500, "Error fetching number of commits", err) } setData(ctx, "nbCommits", nbCommits) if currUser != nil { hasLiked, err := currUser.HasLiked(gist) if err != nil { return errorRes(500, "Cannot get user like status", err) } setData(ctx, "hasLiked", hasLiked) } if gist.Private > 0 { setData(ctx, "NoIndex", true) } return next(ctx) } } // gistSoftInit try to load a gist (same as gistInit) but does not return a 404 if the gist is not found // useful for git clients using HTTP to obfuscate the existence of a private gist func gistSoftInit(next echo.HandlerFunc) echo.HandlerFunc { return func(ctx echo.Context) error { userName := ctx.Param("user") gistName := ctx.Param("gistname") gistName = strings.TrimSuffix(gistName, ".git") gist, _ := db.GetGist(userName, gistName) setData(ctx, "gist", gist) return next(ctx) } } // gistNewPushInit has the same behavior as gistSoftInit but create a new gist empty instead func gistNewPushSoftInit(next echo.HandlerFunc) echo.HandlerFunc { return func(c echo.Context) error { setData(c, "gist", new(db.Gist)) return next(c) } } func allGists(ctx echo.Context) error { var err error var urlPage string fromUserStr := ctx.Param("user") userLogged := getUserLogged(ctx) pageInt := getPage(ctx) sort := "created" sortText := trH(ctx, "gist.list.sort-by-created") order := "desc" orderText := trH(ctx, "gist.list.order-by-desc") if ctx.QueryParam("sort") == "updated" { sort = "updated" sortText = trH(ctx, "gist.list.sort-by-updated") } if ctx.QueryParam("order") == "asc" { order = "asc" orderText = trH(ctx, "gist.list.order-by-asc") } setData(ctx, "sort", sortText) setData(ctx, "order", orderText) var gists []*db.Gist var currentUserId uint if userLogged != nil { currentUserId = userLogged.ID } else { currentUserId = 0 } if fromUserStr == "" { urlctx := ctx.Request().URL.Path if strings.HasSuffix(urlctx, "search") { setData(ctx, "htmlTitle", trH(ctx, "gist.list.search-results")) setData(ctx, "mode", "search") setData(ctx, "searchQuery", ctx.QueryParam("q")) setData(ctx, "searchQueryUrl", template.URL("&q="+ctx.QueryParam("q"))) urlPage = "search" gists, err = db.GetAllGistsFromSearch(currentUserId, ctx.QueryParam("q"), pageInt-1, sort, order) } else if strings.HasSuffix(urlctx, "all") { setData(ctx, "htmlTitle", trH(ctx, "gist.list.all")) setData(ctx, "mode", "all") urlPage = "all" gists, err = db.GetAllGistsForCurrentUser(currentUserId, pageInt-1, sort, order) } } else { liked := false forked := false liked, err = regexp.MatchString(`/[^/]*/liked`, ctx.Request().URL.Path) if err != nil { return errorRes(500, "Error matching regexp", err) } forked, err = regexp.MatchString(`/[^/]*/forked`, ctx.Request().URL.Path) if err != nil { return errorRes(500, "Error matching regexp", err) } var fromUser *db.User fromUser, err = db.GetUserByUsername(fromUserStr) if err != nil { if errors.Is(err, gorm.ErrRecordNotFound) { return notFound("User not found") } return errorRes(500, "Error fetching user", err) } setData(ctx, "fromUser", fromUser) if countFromUser, err := db.CountAllGistsFromUser(fromUser.ID, currentUserId); err != nil { return errorRes(500, "Error counting gists", err) } else { setData(ctx, "countFromUser", countFromUser) } if countLiked, err := db.CountAllGistsLikedByUser(fromUser.ID, currentUserId); err != nil { return errorRes(500, "Error counting liked gists", err) } else { setData(ctx, "countLiked", countLiked) } if countForked, err := db.CountAllGistsForkedByUser(fromUser.ID, currentUserId); err != nil { return errorRes(500, "Error counting forked gists", err) } else { setData(ctx, "countForked", countForked) } if liked { urlPage = fromUserStr + "/liked" setData(ctx, "htmlTitle", trH(ctx, "gist.list.all-liked-by", fromUserStr)) setData(ctx, "mode", "liked") gists, err = db.GetAllGistsLikedByUser(fromUser.ID, currentUserId, pageInt-1, sort, order) } else if forked { urlPage = fromUserStr + "/forked" setData(ctx, "htmlTitle", trH(ctx, "gist.list.all-forked-by", fromUserStr)) setData(ctx, "mode", "forked") gists, err = db.GetAllGistsForkedByUser(fromUser.ID, currentUserId, pageInt-1, sort, order) } else { urlPage = fromUserStr setData(ctx, "htmlTitle", trH(ctx, "gist.list.all-from", fromUserStr)) setData(ctx, "mode", "fromUser") gists, err = db.GetAllGistsFromUser(fromUser.ID, currentUserId, pageInt-1, sort, order) } } renderedGists := make([]*render.RenderedGist, 0, len(gists)) for _, gist := range gists { rendered, err := render.HighlightGistPreview(gist) if err != nil { log.Error().Err(err).Msg("Error rendering gist preview for " + gist.Identifier() + " - " + gist.PreviewFilename) } renderedGists = append(renderedGists, &rendered) } if err != nil { return errorRes(500, "Error fetching gists", err) } if err = paginate(ctx, renderedGists, pageInt, 10, "gists", fromUserStr, 2, "&sort="+sort+"&order="+order); err != nil { return errorRes(404, tr(ctx, "error.page-not-found"), nil) } setData(ctx, "urlPage", urlPage) return html(ctx, "all.html") } func search(ctx echo.Context) error { var err error content, meta := parseSearchQueryStr(ctx.QueryParam("q")) pageInt := getPage(ctx) var currentUserId uint userLogged := getUserLogged(ctx) if userLogged != nil { currentUserId = userLogged.ID } else { currentUserId = 0 } var visibleGistsIds []uint visibleGistsIds, err = db.GetAllGistsVisibleByUser(currentUserId) if err != nil { return errorRes(500, "Error fetching gists", err) } gistsIds, nbHits, langs, err := index.SearchGists(content, index.SearchGistMetadata{ Username: meta["user"], Title: meta["title"], Filename: meta["filename"], Extension: meta["extension"], Language: meta["language"], }, visibleGistsIds, pageInt) if err != nil { return errorRes(500, "Error searching gists", err) } gists, err := db.GetAllGistsByIds(gistsIds) if err != nil { return errorRes(500, "Error fetching gists", err) } renderedGists := make([]*render.RenderedGist, 0, len(gists)) for _, gist := range gists { rendered, err := render.HighlightGistPreview(gist) if err != nil { log.Error().Err(err).Msg("Error rendering gist preview for " + gist.Identifier() + " - " + gist.PreviewFilename) } renderedGists = append(renderedGists, &rendered) } if pageInt > 1 && len(renderedGists) != 0 { setData(ctx, "prevPage", pageInt-1) } if 10*pageInt < int(nbHits) { setData(ctx, "nextPage", pageInt+1) } setData(ctx, "prevLabel", trH(ctx, "pagination.previous")) setData(ctx, "nextLabel", trH(ctx, "pagination.next")) setData(ctx, "urlPage", "search") setData(ctx, "urlParams", template.URL("&q="+ctx.QueryParam("q"))) setData(ctx, "htmlTitle", trH(ctx, "gist.list.search-results")) setData(ctx, "nbHits", nbHits) setData(ctx, "gists", renderedGists) setData(ctx, "langs", langs) setData(ctx, "searchQuery", ctx.QueryParam("q")) return html(ctx, "search.html") } func gistIndex(ctx echo.Context) error { if getData(ctx, "gistpage") == "js" { return gistJs(ctx) } else if getData(ctx, "gistpage") == "json" { return gistJson(ctx) } gist := getData(ctx, "gist").(*db.Gist) revision := ctx.Param("revision") if revision == "" { revision = "HEAD" } files, err := gist.Files(revision, true) if _, ok := err.(*git.RevisionNotFoundError); ok { return notFound("Revision not found") } else if err != nil { return errorRes(500, "Error fetching files", err) } renderedFiles := render.HighlightFiles(files) setData(ctx, "page", "code") setData(ctx, "commit", revision) setData(ctx, "files", renderedFiles) setData(ctx, "revision", revision) setData(ctx, "htmlTitle", gist.Title) return html(ctx, "gist.html") } func gistJson(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) files, err := gist.Files("HEAD", true) if err != nil { return errorRes(500, "Error fetching files", err) } renderedFiles := render.HighlightFiles(files) setData(ctx, "files", renderedFiles) htmlbuf := bytes.Buffer{} w := bufio.NewWriter(&htmlbuf) if err = ctx.Echo().Renderer.Render(w, "gist_embed.html", dataMap(ctx), ctx); err != nil { return err } _ = w.Flush() jsUrl, err := url.JoinPath(getData(ctx, "baseHttpUrl").(string), gist.User.Username, gist.Identifier()+".js") if err != nil { return errorRes(500, "Error joining js url", err) } cssUrl, err := url.JoinPath(getData(ctx, "baseHttpUrl").(string), manifestEntries["embed.css"].File) if err != nil { return errorRes(500, "Error joining css url", err) } return ctx.JSON(200, map[string]interface{}{ "owner": gist.User.Username, "id": gist.Identifier(), "uuid": gist.Uuid, "title": gist.Title, "description": gist.Description, "created_at": time.Unix(gist.CreatedAt, 0).Format(time.RFC3339), "visibility": gist.VisibilityStr(), "files": renderedFiles, "embed": map[string]string{ "html": htmlbuf.String(), "css": cssUrl, "js": jsUrl, "js_dark": jsUrl + "?dark", }, }) } func gistJs(ctx echo.Context) error { if _, exists := ctx.QueryParams()["dark"]; exists { setData(ctx, "dark", "dark") } gist := getData(ctx, "gist").(*db.Gist) files, err := gist.Files("HEAD", true) if err != nil { return errorRes(500, "Error fetching files", err) } renderedFiles := render.HighlightFiles(files) setData(ctx, "files", renderedFiles) htmlbuf := bytes.Buffer{} w := bufio.NewWriter(&htmlbuf) if err = ctx.Echo().Renderer.Render(w, "gist_embed.html", dataMap(ctx), ctx); err != nil { return err } _ = w.Flush() cssUrl, err := url.JoinPath(getData(ctx, "baseHttpUrl").(string), manifestEntries["embed.css"].File) if err != nil { return errorRes(500, "Error joining css url", err) } js, err := escapeJavaScriptContent(htmlbuf.String(), cssUrl) if err != nil { return errorRes(500, "Error escaping JavaScript content", err) } ctx.Response().Header().Set("Content-Type", "application/javascript") return plainText(ctx, 200, js) } func revisions(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) userName := gist.User.Username gistName := gist.Identifier() pageInt := getPage(ctx) commits, err := gist.Log((pageInt - 1) * 10) if err != nil { return errorRes(500, "Error fetching commits log", err) } if err := paginate(ctx, commits, pageInt, 10, "commits", userName+"/"+gistName+"/revisions", 2); err != nil { return errorRes(404, tr(ctx, "error.page-not-found"), nil) } emailsSet := map[string]struct{}{} for _, commit := range commits { if commit.AuthorEmail == "" { continue } emailsSet[strings.ToLower(commit.AuthorEmail)] = struct{}{} } emailsUsers, err := db.GetUsersFromEmails(emailsSet) if err != nil { return errorRes(500, "Error fetching users emails", err) } setData(ctx, "page", "revisions") setData(ctx, "revision", "HEAD") setData(ctx, "emails", emailsUsers) setData(ctx, "htmlTitle", trH(ctx, "gist.revision-of", gist.Title)) return html(ctx, "revisions.html") } func create(ctx echo.Context) error { setData(ctx, "htmlTitle", trH(ctx, "gist.new.create-a-new-gist")) return html(ctx, "create.html") } func processCreate(ctx echo.Context) error { isCreate := false if ctx.Request().URL.Path == "/" { isCreate = true } err := ctx.Request().ParseForm() if err != nil { return errorRes(400, tr(ctx, "error.bad-request"), err) } dto := new(db.GistDTO) var gist *db.Gist if isCreate { setData(ctx, "htmlTitle", trH(ctx, "gist.new.create-a-new-gist")) } else { gist = getData(ctx, "gist").(*db.Gist) setData(ctx, "htmlTitle", trH(ctx, "gist.edit.edit-gist", gist.Title)) } if err := ctx.Bind(dto); err != nil { return errorRes(400, tr(ctx, "error.cannot-bind-data"), err) } dto.Files = make([]db.FileDTO, 0) fileCounter := 0 for i := 0; i < len(ctx.Request().PostForm["content"]); i++ { name := ctx.Request().PostForm["name"][i] content := ctx.Request().PostForm["content"][i] if name == "" { fileCounter += 1 name = "gistfile" + strconv.Itoa(fileCounter) + ".txt" } escapedValue, err := url.QueryUnescape(content) if err != nil { return errorRes(400, tr(ctx, "error.invalid-character-unescaped"), err) } dto.Files = append(dto.Files, db.FileDTO{ Filename: strings.Trim(name, " "), Content: escapedValue, }) } err = ctx.Validate(dto) if err != nil { addFlash(ctx, utils.ValidationMessages(&err, getData(ctx, "locale").(*i18n.Locale)), "error") if isCreate { return html(ctx, "create.html") } else { files, err := gist.Files("HEAD", false) if err != nil { return errorRes(500, "Error fetching files", err) } setData(ctx, "files", files) return html(ctx, "edit.html") } } if isCreate { gist = dto.ToGist() } else { gist = dto.ToExistingGist(gist) } user := getUserLogged(ctx) gist.NbFiles = len(dto.Files) if isCreate { uuidGist, err := uuid.NewRandom() if err != nil { return errorRes(500, "Error creating an UUID", err) } gist.Uuid = strings.Replace(uuidGist.String(), "-", "", -1) gist.UserID = user.ID gist.User = *user } if gist.Title == "" { if ctx.Request().PostForm["name"][0] == "" { gist.Title = "gist:" + gist.Uuid } else { gist.Title = ctx.Request().PostForm["name"][0] } } if len(dto.Files) > 0 { split := strings.Split(dto.Files[0].Content, "\n") if len(split) > 10 { gist.Preview = strings.Join(split[:10], "\n") } else { gist.Preview = dto.Files[0].Content } gist.PreviewFilename = dto.Files[0].Filename } if err = gist.InitRepository(); err != nil { return errorRes(500, "Error creating the repository", err) } if err = gist.AddAndCommitFiles(&dto.Files); err != nil { return errorRes(500, "Error adding and committing files", err) } if isCreate { if err = gist.Create(); err != nil { return errorRes(500, "Error creating the gist", err) } } else { if err = gist.Update(); err != nil { return errorRes(500, "Error updating the gist", err) } } gist.AddInIndex() return redirect(ctx, "/"+user.Username+"/"+gist.Identifier()) } func editVisibility(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) dto := new(db.VisibilityDTO) if err := ctx.Bind(dto); err != nil { return errorRes(400, tr(ctx, "error.cannot-bind-data"), err) } gist.Private = dto.Private if err := gist.UpdateNoTimestamps(); err != nil { return errorRes(500, "Error updating this gist", err) } addFlash(ctx, tr(ctx, "flash.gist.visibility-changed"), "success") return redirect(ctx, "/"+gist.User.Username+"/"+gist.Identifier()) } func deleteGist(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) if err := gist.Delete(); err != nil { return errorRes(500, "Error deleting this gist", err) } gist.RemoveFromIndex() addFlash(ctx, tr(ctx, "flash.gist.deleted"), "success") return redirect(ctx, "/") } func like(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) currentUser := getUserLogged(ctx) hasLiked, err := currentUser.HasLiked(gist) if err != nil { return errorRes(500, "Error checking if user has liked a gist", err) } if hasLiked { err = gist.RemoveUserLike(getUserLogged(ctx)) } else { err = gist.AppendUserLike(getUserLogged(ctx)) } if err != nil { return errorRes(500, "Error liking/dislking this gist", err) } redirectTo := "/" + gist.User.Username + "/" + gist.Identifier() if r := ctx.QueryParam("redirecturl"); r != "" { redirectTo = r } return redirect(ctx, redirectTo) } func fork(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) currentUser := getUserLogged(ctx) alreadyForked, err := gist.GetForkParent(currentUser) if err != nil && !errors.Is(err, gorm.ErrRecordNotFound) { return errorRes(500, "Error checking if gist is already forked", err) } if gist.User.ID == currentUser.ID { addFlash(ctx, tr(ctx, "flash.gist.fork-own-gist"), "error") return redirect(ctx, "/"+gist.User.Username+"/"+gist.Identifier()) } if alreadyForked.ID != 0 { return redirect(ctx, "/"+alreadyForked.User.Username+"/"+alreadyForked.Identifier()) } uuidGist, err := uuid.NewRandom() if err != nil { return errorRes(500, "Error creating an UUID", err) } newGist := &db.Gist{ Uuid: strings.Replace(uuidGist.String(), "-", "", -1), Title: gist.Title, Preview: gist.Preview, PreviewFilename: gist.PreviewFilename, Description: gist.Description, Private: gist.Private, UserID: currentUser.ID, ForkedID: gist.ID, NbFiles: gist.NbFiles, } if err = newGist.CreateForked(); err != nil { return errorRes(500, "Error forking the gist in database", err) } if err = gist.ForkClone(currentUser.Username, newGist.Uuid); err != nil { return errorRes(500, "Error cloning the repository while forking", err) } if err = gist.IncrementForkCount(); err != nil { return errorRes(500, "Error incrementing the fork count", err) } addFlash(ctx, tr(ctx, "flash.gist.forked"), "success") return redirect(ctx, "/"+currentUser.Username+"/"+newGist.Identifier()) } func rawFile(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) file, err := gist.File(ctx.Param("revision"), ctx.Param("file"), false) if err != nil { return errorRes(500, "Error getting file content", err) } if file == nil { return notFound("File not found") } return plainText(ctx, 200, file.Content) } func downloadFile(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) file, err := gist.File(ctx.Param("revision"), ctx.Param("file"), false) if err != nil { return errorRes(500, "Error getting file content", err) } if file == nil { return notFound("File not found") } ctx.Response().Header().Set("Content-Type", "text/plain") ctx.Response().Header().Set("Content-Disposition", "attachment; filename="+file.Filename) ctx.Response().Header().Set("Content-Length", strconv.Itoa(len(file.Content))) _, err = ctx.Response().Write([]byte(file.Content)) if err != nil { return errorRes(500, "Error downloading the file", err) } return nil } func edit(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) files, err := gist.Files("HEAD", false) if err != nil { return errorRes(500, "Error fetching files from repository", err) } setData(ctx, "files", files) setData(ctx, "htmlTitle", trH(ctx, "gist.edit.edit-gist", gist.Title)) return html(ctx, "edit.html") } func downloadZip(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) revision := ctx.Param("revision") files, err := gist.Files(revision, false) if err != nil { return errorRes(500, "Error fetching files from repository", err) } if len(files) == 0 { return notFound("No files found in this revision") } zipFile := new(bytes.Buffer) zipWriter := zip.NewWriter(zipFile) for _, file := range files { fh := &zip.FileHeader{ Name: file.Filename, Method: zip.Deflate, } f, err := zipWriter.CreateHeader(fh) if err != nil { return errorRes(500, "Error adding a file the to the zip archive", err) } _, err = f.Write([]byte(file.Content)) if err != nil { return errorRes(500, "Error adding file content the to the zip archive", err) } } err = zipWriter.Close() if err != nil { return errorRes(500, "Error closing the zip archive", err) } ctx.Response().Header().Set("Content-Type", "application/zip") ctx.Response().Header().Set("Content-Disposition", "attachment; filename="+gist.Identifier()+".zip") ctx.Response().Header().Set("Content-Length", strconv.Itoa(len(zipFile.Bytes()))) _, err = ctx.Response().Write(zipFile.Bytes()) if err != nil { return errorRes(500, "Error writing the zip archive", err) } return nil } func likes(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) pageInt := getPage(ctx) likers, err := gist.GetUsersLikes(pageInt - 1) if err != nil { return errorRes(500, "Error getting users who liked this gist", err) } if err = paginate(ctx, likers, pageInt, 30, "likers", gist.User.Username+"/"+gist.Identifier()+"/likes", 1); err != nil { return errorRes(404, tr(ctx, "error.page-not-found"), nil) } setData(ctx, "htmlTitle", trH(ctx, "gist.likes.for", gist.Title)) setData(ctx, "revision", "HEAD") return html(ctx, "likes.html") } func forks(ctx echo.Context) error { gist := getData(ctx, "gist").(*db.Gist) pageInt := getPage(ctx) currentUser := getUserLogged(ctx) var fromUserID uint = 0 if currentUser != nil { fromUserID = currentUser.ID } forks, err := gist.GetForks(fromUserID, pageInt-1) if err != nil { return errorRes(500, "Error getting users who liked this gist", err) } if err = paginate(ctx, forks, pageInt, 30, "forks", gist.User.Username+"/"+gist.Identifier()+"/forks", 2); err != nil { return errorRes(404, tr(ctx, "error.page-not-found"), nil) } setData(ctx, "htmlTitle", trH(ctx, "gist.forks.for", gist.Title)) setData(ctx, "revision", "HEAD") return html(ctx, "forks.html") } func checkbox(ctx echo.Context) error { filename := ctx.FormValue("file") checkboxNb := ctx.FormValue("checkbox") i, err := strconv.Atoi(checkboxNb) if err != nil { return errorRes(400, tr(ctx, "error.invalid-number"), nil) } gist := getData(ctx, "gist").(*db.Gist) file, err := gist.File("HEAD", filename, false) if err != nil { return errorRes(500, "Error getting file content", err) } else if file == nil { return notFound("File not found") } markdown, err := render.Checkbox(file.Content, i) if err != nil { return errorRes(500, "Error checking checkbox", err) } if err = gist.AddAndCommitFile(&db.FileDTO{ Filename: filename, Content: markdown, }); err != nil { return errorRes(500, "Error adding and committing files", err) } if err = gist.UpdatePreviewAndCount(true); err != nil { return errorRes(500, "Error updating the gist", err) } return plainText(ctx, 200, "ok") } func preview(ctx echo.Context) error { content := ctx.FormValue("content") previewStr, err := render.MarkdownString(content) if err != nil { return errorRes(500, "Error rendering markdown", err) } return plainText(ctx, 200, previewStr) } func escapeJavaScriptContent(htmlContent, cssUrl string) (string, error) { jsonContent, err := gojson.Marshal(htmlContent) if err != nil { return "", fmt.Errorf("failed to encode content: %w", err) } jsonCssUrl, err := gojson.Marshal(cssUrl) if err != nil { return "", fmt.Errorf("failed to encode CSS URL: %w", err) } js := fmt.Sprintf(` document.write(''); document.write(%s); `, string(jsonCssUrl), string(jsonContent), ) return js, nil }