XssForm.jsx 5.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160
  1. import React from 'react';
  2. import { useTranslation } from 'next-i18next';
  3. import PropTypes from 'prop-types';
  4. import AdminMarkDownContainer from '~/client/services/AdminMarkDownContainer';
  5. import { toastSuccess, toastError } from '~/client/util/apiNotification';
  6. import { tags, attrs } from '~/services/xss/recommended-whitelist';
  7. import loggerFactory from '~/utils/logger';
  8. import { withUnstatedContainers } from '../../UnstatedUtils';
  9. import AdminUpdateButtonRow from '../Common/AdminUpdateButtonRow';
  10. import WhiteListInput from './WhiteListInput';
  11. const logger = loggerFactory('growi:importer');
  12. class XssForm extends React.Component {
  13. constructor(props) {
  14. super(props);
  15. this.onClickSubmit = this.onClickSubmit.bind(this);
  16. }
  17. async onClickSubmit() {
  18. const { t } = this.props;
  19. try {
  20. await this.props.adminMarkDownContainer.updateXssSetting();
  21. toastSuccess(t('toaster.update_successed', { target: t('markdown_settings.xss_header'), ns: 'commons' }));
  22. }
  23. catch (err) {
  24. toastError(err);
  25. logger.error(err);
  26. }
  27. }
  28. xssOptions() {
  29. const { t, adminMarkDownContainer } = this.props;
  30. const { xssOption } = adminMarkDownContainer.state;
  31. return (
  32. <div className="form-group col-12 my-3">
  33. <div className="row">
  34. <div className="col-md-6 col-sm-12 align-self-start mb-4">
  35. <div className="custom-control custom-radio">
  36. <input
  37. type="radio"
  38. className="custom-control-input"
  39. id="xssOption2"
  40. name="XssOption"
  41. checked={xssOption === 2}
  42. onChange={() => { adminMarkDownContainer.setState({ xssOption: 2 }) }}
  43. />
  44. <label className="custom-control-label w-100" htmlFor="xssOption2">
  45. <p className="font-weight-bold">{t('markdown_settings.xss_options.recommended_setting')}</p>
  46. <div className="mt-4">
  47. <div className="d-flex justify-content-between">
  48. {t('markdown_settings.xss_options.tag_names')}
  49. </div>
  50. <textarea
  51. className="form-control xss-list"
  52. name="recommendedTags"
  53. rows="6"
  54. cols="40"
  55. readOnly
  56. defaultValue={tags}
  57. />
  58. </div>
  59. <div className="mt-4">
  60. <div className="d-flex justify-content-between">
  61. {t('markdown_settings.xss_options.tag_attributes')}
  62. </div>
  63. <textarea
  64. className="form-control xss-list"
  65. name="recommendedAttrs"
  66. rows="6"
  67. cols="40"
  68. readOnly
  69. defaultValue={attrs}
  70. />
  71. </div>
  72. </label>
  73. </div>
  74. </div>
  75. <div className="col-md-6 col-sm-12 align-self-start mb-4">
  76. <div className="custom-control custom-radio">
  77. <input
  78. type="radio"
  79. className="custom-control-input"
  80. id="xssOption3"
  81. name="XssOption"
  82. checked={xssOption === 3}
  83. onChange={() => { adminMarkDownContainer.setState({ xssOption: 3 }) }}
  84. />
  85. <label className="custom-control-label w-100" htmlFor="xssOption3">
  86. <p className="font-weight-bold">{t('markdown_settings.xss_options.custom_whitelist')}</p>
  87. <WhiteListInput customizable />
  88. </label>
  89. </div>
  90. </div>
  91. </div>
  92. </div>
  93. );
  94. }
  95. render() {
  96. const { t, adminMarkDownContainer } = this.props;
  97. const { isEnabledXss } = adminMarkDownContainer.state;
  98. return (
  99. <React.Fragment>
  100. <fieldset className="col-12">
  101. <div className="form-group">
  102. <div className="col-8 offset-4 my-3">
  103. <div className="custom-control custom-switch custom-checkbox-success">
  104. <input
  105. type="checkbox"
  106. className="custom-control-input"
  107. id="XssEnable"
  108. name="isEnabledXss"
  109. checked={isEnabledXss}
  110. onChange={adminMarkDownContainer.switchEnableXss}
  111. />
  112. <label className="custom-control-label w-100" htmlFor="XssEnable">
  113. {t('markdown_settings.xss_options.enable_xss_prevention')}
  114. </label>
  115. </div>
  116. </div>
  117. </div>
  118. <div className="col-12">
  119. {isEnabledXss && this.xssOptions()}
  120. </div>
  121. </fieldset>
  122. <AdminUpdateButtonRow onClick={this.onClickSubmit} disabled={adminMarkDownContainer.state.retrieveError != null} />
  123. </React.Fragment>
  124. );
  125. }
  126. }
  127. XssForm.propTypes = {
  128. t: PropTypes.func.isRequired, // i18next
  129. adminMarkDownContainer: PropTypes.instanceOf(AdminMarkDownContainer).isRequired,
  130. };
  131. const XssFormWrapperFC = (props) => {
  132. const { t } = useTranslation('admin');
  133. return <XssForm t={t} {...props} />;
  134. };
  135. const XssFormWrapper = withUnstatedContainers(XssFormWrapperFC, [AdminMarkDownContainer]);
  136. export default XssFormWrapper;