|
|
|
@ -15,8 +15,11 @@ defmodule Pleroma.HTML do
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def filter_tags(html, nil) do
|
|
|
|
|
get_scrubbers()
|
|
|
|
|
|> Enum.reduce(html, fn scrubber, html ->
|
|
|
|
|
filter_tags(html, get_scrubbers())
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def filter_tags(html, scrubbers) when is_list(scrubbers) do
|
|
|
|
|
Enum.reduce(scrubbers, html, fn scrubber, html ->
|
|
|
|
|
filter_tags(html, scrubber)
|
|
|
|
|
end)
|
|
|
|
|
end
|
|
|
|
@ -24,6 +27,40 @@ defmodule Pleroma.HTML do
|
|
|
|
|
def filter_tags(html, scrubber), do: Scrubber.scrub(html, scrubber)
|
|
|
|
|
def filter_tags(html), do: filter_tags(html, nil)
|
|
|
|
|
def strip_tags(html), do: Scrubber.scrub(html, Scrubber.StripTags)
|
|
|
|
|
|
|
|
|
|
def get_cached_scrubbed_html_for_object(content, scrubbers, object) do
|
|
|
|
|
key = "#{generate_scrubber_signature(scrubbers)}|#{object.id}"
|
|
|
|
|
Cachex.fetch!(:scrubber_cache, key, fn _key -> ensure_scrubbed_html(content, scrubbers) end)
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def get_cached_stripped_html_for_object(content, object) do
|
|
|
|
|
get_cached_scrubbed_html_for_object(content, HtmlSanitizeEx.Scrubber.StripTags, object)
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def ensure_scrubbed_html(
|
|
|
|
|
content,
|
|
|
|
|
scrubbers
|
|
|
|
|
) do
|
|
|
|
|
{:commit, filter_tags(content, scrubbers)}
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
defp generate_scrubber_signature(scrubber) when is_atom(scrubber) do
|
|
|
|
|
generate_scrubber_signature([scrubber])
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
defp generate_scrubber_signature(scrubbers) do
|
|
|
|
|
Enum.reduce(scrubbers, "", fn scrubber, signature ->
|
|
|
|
|
# If a scrubber does not have a version(e.g HtmlSanitizeEx.Scrubber.StripTags) it is assumed it is always 0)
|
|
|
|
|
version =
|
|
|
|
|
if Kernel.function_exported?(scrubber, :version, 0) do
|
|
|
|
|
scrubber.version
|
|
|
|
|
else
|
|
|
|
|
0
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
"#{signature}#{to_string(scrubber)}#{version}"
|
|
|
|
|
end)
|
|
|
|
|
end
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
defmodule Pleroma.HTML.Scrubber.TwitterText do
|
|
|
|
@ -39,6 +76,10 @@ defmodule Pleroma.HTML.Scrubber.TwitterText do
|
|
|
|
|
require HtmlSanitizeEx.Scrubber.Meta
|
|
|
|
|
alias HtmlSanitizeEx.Scrubber.Meta
|
|
|
|
|
|
|
|
|
|
def version do
|
|
|
|
|
0
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
Meta.remove_cdata_sections_before_scrub()
|
|
|
|
|
Meta.strip_comments()
|
|
|
|
|
|
|
|
|
@ -77,6 +118,10 @@ defmodule Pleroma.HTML.Scrubber.Default do
|
|
|
|
|
require HtmlSanitizeEx.Scrubber.Meta
|
|
|
|
|
alias HtmlSanitizeEx.Scrubber.Meta
|
|
|
|
|
|
|
|
|
|
def version do
|
|
|
|
|
0
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
@markup Application.get_env(:pleroma, :markup)
|
|
|
|
|
@uri_schemes Application.get_env(:pleroma, :uri_schemes, [])
|
|
|
|
|
@valid_schemes Keyword.get(@uri_schemes, :valid_schemes, [])
|
|
|
|
@ -154,6 +199,10 @@ defmodule Pleroma.HTML.Transform.MediaProxy do
|
|
|
|
|
|
|
|
|
|
alias Pleroma.Web.MediaProxy
|
|
|
|
|
|
|
|
|
|
def version do
|
|
|
|
|
0
|
|
|
|
|
end
|
|
|
|
|
|
|
|
|
|
def before_scrub(html), do: html
|
|
|
|
|
|
|
|
|
|
def scrub_attribute("img", {"src", "http" <> target}) do
|
|
|
|
|