weseek__growi/lib/views/admin/markdown.html

{% extends '../layout/admin.html' %}

{% block html_title %}{{ customTitle(t('Markdown settings')) }}
 · {{ path }}{% endblock %}

{% block content_header %}
<div class="header-wrap">
  <header id="page-header">
    <h1 class="title" id="">{{ t('Markdown settings') }}</h1>
  </header>
</div>
{% endblock %}

{% block content_main %}
<div class="content-main">
  <div class="row">
    <div class="col-md-3">
      {% include './widget/menu.html' with {current: 'markdown'} %}
    </div>
    <div class="col-md-9">

      {% set smessage = req.flash('successMessage') %}
      {% if smessage.length %}
      <div class="alert alert-success">
        {% for e in smessage %}
          {{ e }}<br>
        {% endfor %}
      </div>
      {% endif %}

      {% set emessage = req.flash('errorMessage') %}
      {% if emessage.length %}
      <div class="alert alert-danger">
        {% for e in emessage %}
        {{ e }}<br>
        {% endfor %}
      </div>
      {% endif %}

      <form action="/admin/markdown/lineBreaksSetting" method="post" class="form-horizontal" id="markdownSettingForm" role="form">
      <fieldset>
        <legend>{{ t('markdown_setting.line_break_setting') }}</legend>
        <p class="well">{{ t("markdown_setting.line_break_setting_desc") }}</p>

        <div class="form-group">
          <label for="markdownSetting[markdown:isEnabledLinebreaks]" class="col-xs-4 control-label">
            {{ t('markdown_setting.Enable Line Break') }}
          </label>
          <div class="col-xs-5">
            <div class="btn-group btn-toggle" data-toggle="buttons">
              <label class="btn btn-default btn-rounded btn-outline {% if markdownSetting['markdown:isEnabledLinebreaks'] %}active{% endif %}" data-active-class="primary">
                <input name="markdownSetting[markdown:isEnabledLinebreaks]" value="true" type="radio"
                    {% if true === markdownSetting['markdown:isEnabledLinebreaks'] %}checked{% endif %}> ON
              </label>
              <label class="btn btn-default btn-rounded btn-outline {% if !markdownSetting['markdown:isEnabledLinebreaks'] %}active{% endif %}" data-active-class="default">
                <input name="markdownSetting[markdown:isEnabledLinebreaks]" value="false" type="radio"
                    {% if !markdownSetting['markdown:isEnabledLinebreaks'] %}checked{% endif %}> OFF
              </label>
            </div>
            <p class="help-block">{{ t("markdown_setting.Enable Line Break desc") }}</p>
          </div>
        </div>

        <div class="form-group">
          <label for="markdownSetting[markdown:isEnabledLinebreaksInComments]" class="col-xs-4 control-label">
            {{ t("markdown_setting.Enable Line Break for comment") }}
          </label>
          <div class="col-xs-5">
            <div class="btn-group btn-toggle" data-toggle="buttons">
              <label class="btn btn-default btn-rounded btn-outline {% if markdownSetting['markdown:isEnabledLinebreaksInComments'] %}active{% endif %}" data-active-class="primary">
                <input name="markdownSetting[markdown:isEnabledLinebreaksInComments]" value="true" type="radio"
                    {% if true === markdownSetting['markdown:isEnabledLinebreaksInComments'] %}checked{% endif %}> ON
              </label>
              <label class="btn btn-default btn-rounded btn-outline {% if !markdownSetting['markdown:isEnabledLinebreaksInComments'] %}active{% endif %}" data-active-class="default">
                <input name="markdownSetting[markdown:isEnabledLinebreaksInComments]" value="false" type="radio"
                    {% if !markdownSetting['markdown:isEnabledLinebreaksInComments'] %}checked{% endif %}> OFF
              </label>
            </div>
            <p class="help-block">{{ t("markdown_setting.Enable Line Break for comment desc") }}</p>
          </div>
        </div>



        {% set nameForIsXssEnabled = "settingForm[security:xss-prevent:isEnabled]" %}

        <legend>{{ t('markdown_setting.XSS_setting') }}</legend>
        <p class="well">{{ t("markdown_setting.XSS_setting_desc") }}</p>

            <label for="markdownSetting[markdown:isPreventXss]" class="col-xs-4 control-label">
              {{ t('markdown_setting.Prevent XSS(Cross Site Scripting)') }}
            </label>

            <div class="col-xs-5">
              <div class="form-group">
                <div class="col-xs-6">
                  <div class="btn-group btn-toggle" data-toggle="buttons">
                    <label class="btn btn-default btn-rounded btn-outline" data-active-class="primary">
                      <input name="{{nameForIsXssEnabled}}" value="true" type="radio"
                          {% if true === isXssEnabled %}checked{% endif %}> ON
                    </label>
                    <label class="btn btn-default btn-rounded btn-outline {% if !isGoogleEnabled %}active{% endif %}" data-active-class="default">
                      <input name="{{nameForIsXssEnabled}}" value="false" type="radio"
                          {% if !isXssEnabled %}checked{% endif %}> OFF
                    </label>
                  </div>
                </div>
              </div>

              <fieldset id="xss-hide-when-disabled" {%if !isXssEnabled %}style="display: none;"{% endif %}>
                <p class="help-block">{{ t("markdown_setting.Prevent XSS(Cross Site Scripting)desc") }}<br>
                {{ t("markdown_setting.Prevent XSS(Cross Site Scripting)desc2") }}</p>

                {% set nameForIsXss2Enabled = "settingForm[security:xss2-prevent:isEnabled]" %}

                  <div>
                    <div class="form-group">
                      <div class="col-xs-6">
                        <div class="btn-group btn-toggle" data-toggle="buttons">
                          <div>
                            <label data-active-class="primary">
                              <input name="{{nameForIsXss2Enabled}}" value="1" type="radio"
                              {% if !isXssEnabled %}checked{% endif %}>
                              {{ t('markdown_setting.Ignore all') }}
                            </label>
                          </div>
                          <div>
                            <label data-active-class="primary">
                                <input name="{{nameForIsXss2Enabled}}" value="2" type="radio"
                                {% if true === isXssEnabled %}checked{% endif %}>
                              {{ t('markdown_setting.Recommended setting') }}<br>
                            </label>
                          </div>
                          <div>
                            <label data-active-class="primary">
                              <input name="{{nameForIsXss2Enabled}}" value="3" type="radio"
                              {% if true === isXssEnabled %}checked{% endif %}>
                              {{ t('markdown_setting.Whitelist setting') }}
                            </label>
                          </div>
                        </div>
                      </div>
                    </div>

                    <fieldset id="xss2-hide-when-disabled" {%if !isXssEnabled %}style="display: none;"{% endif %}>
                        <form>
                            <div>
                              {{ t('markdown_setting.tag') }}
                              <div>
                                <textarea type="text" name="tag" rows="5" cols="40" value="" readonly></textarea>
                              </div>
                            </div>
                            <div>
                              {{ t('markdown_setting.tag attribute') }}
                              <div>
                                <textarea name="tagattribute" rows="5" cols="40" value="" readonly></textarea>
                              </div>
                            </div>
                        </form>
                    </fieldset>

                    <fieldset id="xss3-hide-when-disabled" {%if !isXssEnabled %}style="display: none;"{% endif %}>
                        <form>
                            <div>
                              {{ t('markdown_setting.tag') }}
                              <div>
                                <textarea type="text" name="tag" rows="5" cols="40" value="" placeholder="span, iframe, input"></textarea>
                                <input type="button" value="おすすめ設定をインポート" />
                              </div>
                            </div>
                            <div>
                              {{ t('markdown_setting.tag attribute') }}
                              <div>
                                <textarea name="tagattribute" rows="5" cols="40" value="" placeholder="class, type, placeholder, name, required"></textarea>
                                <input type="button" value="おすすめ設定をインポート" />
                              </div>
                            </div>
                        </form>
                    </fieldset>
                  </div>

      </fieldset>
      </form>


            <script>
              $('input[name="settingForm[security:xss-prevent:isEnabled]"]').change(function() {
                const isEnabled = ($(this).val() === "true");

                if (isEnabled) {
                  $('#xss-hide-when-disabled').show(400);
                }
                else {
                  $('#xss-hide-when-disabled').hide(400);
                }
              });

              $('input[name="settingForm[security:xss2-prevent:isEnabled]"]').change(function() {
                const isEnabled = ($(this).val() === "1");
                const isEnabled2 = ($(this).val() === "2");

                if (isEnabled) {
                  $('#xss2-hide-when-disabled').hide(400);
                  $('#xss3-hide-when-disabled').hide(400);
                }
                else if (isEnabled2) {
                  $('#xss2-hide-when-disabled').show(400);
                  $('#xss3-hide-when-disabled').hide(400);
                }
                else {
                  $('#xss3-hide-when-disabled').show(400);
                  $('#xss2-hide-when-disabled').hide(400);
                }
              });
            </script>




        <div class="form-group my-3">
          <div class="col-xs-offset-4 col-xs-5">
            <input type="hidden" name="_csrf" value="{{ csrf() }}">
            <button type="submit" class="btn btn-primary">{{ t("Update") }}</button>
          </div>
        </div>

      </fieldset>
      </form>





    </div>
  </div>

</div>
{% endblock content_main %}

{% block content_footer %}
{% endblock content_footer %}