From 9068564500b3533a848a27b5790be55c10155c0c Mon Sep 17 00:00:00 2001
From: Amir <eslami.amir76@gmail.com>
Date: Sat, 24 Jul 2021 19:47:12 +0430
Subject: [PATCH] feat(hyperlinking): hyperlinking URLs in the channel
 descriptions (#304)

* feat(hyperlinking): hyperlinking URLs in the channel descriptions

* fix(hyperlinking): fixed url detection

* fix(hyperlinking): purify channel descriptions to prevent XSS vulnerability
---
 src/components/Channel.vue | 2 +-
 src/main.js                | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/components/Channel.vue b/src/components/Channel.vue
index 83862448..fce23adf 100644
--- a/src/components/Channel.vue
+++ b/src/components/Channel.vue
@@ -4,7 +4,7 @@
     <div v-if="channel" v-show="!channel.error">
         <h1 class="uk-text-center"><img height="48" width="48" v-bind:src="channel.avatarUrl" />{{ channel.name }}</h1>
         <img v-if="channel.bannerUrl" v-bind:src="channel.bannerUrl" style="width: 100%" loading="lazy" />
-        <p style="white-space: pre-wrap">{{ channel.description }}</p>
+        <p style="white-space: pre-wrap"><span v-html="purifyHTML(urlify(channel.description))"></span></p>
 
         <button
             v-if="authenticated"
diff --git a/src/main.js b/src/main.js
index 87e96af0..d27ff2c9 100644
--- a/src/main.js
+++ b/src/main.js
@@ -158,6 +158,13 @@ const mixin = {
         timeAgo(time) {
             return timeAgo.format(time);
         },
+        urlify(string) {
+            const regex = /(((https?:\/\/)|(www\.))[^\s]+)/g;
+            if (!string) return '';
+            return string.replace(regex, (url) => {
+                return `<a class="uk-button uk-button-text" href="${url}" target="_blank">${url}</a>`
+            })
+        }
     },
     computed: {
         backgroundColor() {