TeamPiped-mirror/Piped
1
0
Fork 0
mirror of https://github.com/TeamPiped/Piped.git synced 2024-08-14 23:57:27 +00:00
Code Issues Projects Releases Packages Wiki Activity

feat(hyperlinking): hyperlinking URLs in the channel descriptions (#304)

Browse source 
* feat(hyperlinking): hyperlinking URLs in the channel descriptions

* fix(hyperlinking): fixed url detection

* fix(hyperlinking): purify channel descriptions to prevent XSS vulnerability
This commit is contained in:
Amir 2021-07-24 19:47:12 +04:30 • committed by GitHub
parent 46aa2cac56
commit 9068564500
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/components/Channel.vue
View file

@ -4,7 +4,7 @@
<div v-if="channel" v-show="!channel.error"> <div v-if="channel" v-show="!channel.error">
<h1 class="uk-text-center"><img height="48" width="48" v-bind:src="channel.avatarUrl" />{{ channel.name }}</h1> <h1 class="uk-text-center"><img height="48" width="48" v-bind:src="channel.avatarUrl" />{{ channel.name }}</h1>
<img v-if="channel.bannerUrl" v-bind:src="channel.bannerUrl" style="width: 100%" loading="lazy" /> <img v-if="channel.bannerUrl" v-bind:src="channel.bannerUrl" style="width: 100%" loading="lazy" />
<p style="white-space: pre-wrap">{{ channel.description }}</p> <p style="white-space: pre-wrap"><span v-html="purifyHTML(urlify(channel.description))"></span></p>
<button <button
v-if="authenticated" v-if="authenticated"

7
src/main.js
View file

@ -158,6 +158,13 @@ const mixin = {
timeAgo(time) { timeAgo(time) {
return timeAgo.format(time); return timeAgo.format(time);
}, },
urlify(string) {
const regex = /(((https?:\/\/)|(www\.))[^\s]+)/g;
if (!string) return '';
return string.replace(regex, (url) => {
return `<a class="uk-button uk-button-text" href="${url}" target="_blank">${url}</a>`
})
}
}, },
computed: { computed: {
backgroundColor() { backgroundColor() {