weseek__growi/lib/views/admin/markdown.html

{% extends '../layout/admin.html' %}

{% block html_title %}{{ customTitle(t('Markdown settings')) }}
 · {{ path }}{% endblock %}

{% block content_header %}
<div class="header-wrap">
  <header id="page-header">
    <h1 class="title" id="">{{ t('Markdown settings') }}</h1>
  </header>
</div>
{% endblock %}

{% block content_main %}
<div class="content-main">
  <div class="row">
    <div class="col-md-3">
      {% include './widget/menu.html' with {current: 'markdown'} %}
    </div>
    <div class="col-md-9">

      {% set smessage = req.flash('successMessage') %}
      {% if smessage.length %}
      <div class="alert alert-success">
        {% for e in smessage %}
          {{ e }}<br>
        {% endfor %}
      </div>
      {% endif %}

      {% set emessage = req.flash('errorMessage') %}
      {% if emessage.length %}
      <div class="alert alert-danger">
        {% for e in emessage %}
        {{ e }}<br>
        {% endfor %}
      </div>
      {% endif %}

      <form action="/admin/markdown/lineBreaksSetting" method="post" class="form-horizontal" id="markdownSettingForm" role="form">
      <fieldset>
        <legend>{{ t('markdown_setting.line_break_setting') }}</legend>
        <p class="well">{{ t("markdown_setting.line_break_setting_desc") }}</p>

        <div class="form-group">
          <label for="markdownSetting[markdown:isEnabledLinebreaks]" class="col-xs-4 control-label">
            {{ t('markdown_setting.Enable Line Break') }}
          </label>
          <div class="col-xs-5">
            <div class="btn-group btn-toggle" data-toggle="buttons">
              <label class="btn btn-default btn-rounded btn-outline {% if markdownSetting['markdown:isEnabledLinebreaks'] %}active{% endif %}" data-active-class="primary">
                <input name="markdownSetting[markdown:isEnabledLinebreaks]" value="true" type="radio"
                    {% if true === markdownSetting['markdown:isEnabledLinebreaks'] %}checked{% endif %}> ON
              </label>
              <label class="btn btn-default btn-rounded btn-outline {% if !markdownSetting['markdown:isEnabledLinebreaks'] %}active{% endif %}" data-active-class="default">
                <input name="markdownSetting[markdown:isEnabledLinebreaks]" value="false" type="radio"
                    {% if !markdownSetting['markdown:isEnabledLinebreaks'] %}checked{% endif %}> OFF
              </label>
            </div>
            <p class="help-block">{{ t("markdown_setting.Enable Line Break desc") }}</p>
          </div>
        </div>

        <div class="form-group">
          <label for="markdownSetting[markdown:isEnabledLinebreaksInComments]" class="col-xs-4 control-label">
            {{ t("markdown_setting.Enable Line Break for comment") }}
          </label>
          <div class="col-xs-5">
            <div class="btn-group btn-toggle" data-toggle="buttons">
              <label class="btn btn-default btn-rounded btn-outline {% if markdownSetting['markdown:isEnabledLinebreaksInComments'] %}active{% endif %}" data-active-class="primary">
                <input name="markdownSetting[markdown:isEnabledLinebreaksInComments]" value="true" type="radio"
                    {% if true === markdownSetting['markdown:isEnabledLinebreaksInComments'] %}checked{% endif %}> ON
              </label>
              <label class="btn btn-default btn-rounded btn-outline {% if !markdownSetting['markdown:isEnabledLinebreaksInComments'] %}active{% endif %}" data-active-class="default">
                <input name="markdownSetting[markdown:isEnabledLinebreaksInComments]" value="false" type="radio"
                    {% if !markdownSetting['markdown:isEnabledLinebreaksInComments'] %}checked{% endif %}> OFF
              </label>
            </div>
            <p class="help-block">{{ t("markdown_setting.Enable Line Break for comment desc") }}</p>
          </div>
        </div>

        <div class="form-group my-3">
          <div class="col-xs-offset-4 col-xs-5">
            <input type="hidden" name="_csrf" value="{{ csrf() }}">
            <button type="submit" class="btn btn-primary">{{ t("Update") }}</button>
          </div>
        </div>
      </fieldset>
      </form>

      <form action="/admin/markdown/xss-setting" method="post" class="form-horizontal" id="markdownSettingForm" role="form">
        <fieldset>

          {% set nameForIsXssEnabled = "settingForm[security:xss-prevent:isEnabled]" %}

          <legend>{{ t('markdown_setting.XSS_setting') }}</legend>
          <p class="well">{{ t("markdown_setting.XSS_setting_desc") }}</p>

          <label for="markdownSetting[markdown:isPreventXss]" class="col-xs-4 control-label">
            {{ t('markdown_setting.Prevent XSS(Cross Site Scripting)') }}
          </label>

          <div class="col-xs-5">
            <div class="form-group">
              <div class="col-xs-6">
                <div class="btn-group btn-toggle" data-toggle="buttons">
                  <label class="btn btn-default btn-rounded btn-outline" data-active-class="primary">
                    <input name="{{nameForIsXssEnabled}}" value="true" type="radio"
                        {% if true === isXssEnabled %}checked{% endif %}> ON
                  </label>
                  <label class="btn btn-default btn-rounded btn-outline {% if !isGoogleEnabled %}active{% endif %}" data-active-class="default">
                    <input name="{{nameForIsXssEnabled}}" value="false" type="radio"
                        {% if !isXssEnabled %}checked{% endif %}> OFF
                  </label>
                </div>
              </div>
            </div>

            <fieldset id="xss-hide-when-disabled" {%if !isXssEnabled %}style="display: none;"{% endif %}>
              {% set nameForIsXss2Enabled = "settingForm[security:xss2-prevent:isEnabled]" %}
              <p class="help-block">{{ t("markdown_setting.Prevent XSS(Cross Site Scripting)desc") }}</p>

              <div class="form-group">
                <div class="col-xs-6">
                  <div class="btn-group btn-toggle" data-toggle="buttons">
                    <div>
                      <label data-active-class="primary">
                        <input name="{{nameForIsXss2Enabled}}" value="1" type="radio"
                        {% if !isXssEnabled %}checked{% endif %}>
                        {{ t('markdown_setting.Ignore all tags') }}
                      </label>
                    </div>
                    <div>
                      <label data-active-class="primary">
                          <input name="{{nameForIsXss2Enabled}}" value="2" type="radio"
                          {% if true === isXssEnabled %}checked{% endif %}>
                        {{ t('markdown_setting.Recommended setting') }}<br>
                      </label>
                    </div>
                    <div>
                      <label data-active-class="primary">
                        <input name="{{nameForIsXss2Enabled}}" value="3" type="radio"
                        {% if true === isXssEnabled %}checked{% endif %}>
                        {{ t('markdown_setting.Custom Whitelist') }}
                      </label>
                    </div>
                  </div>
                </div>
              </div>

              <div id="xss2-hide-when-disabled" {%if !isXssEnabled %}style="display: none;" {% endif %}>
                <div>
                  {{ t('markdown_setting.Tag names') }}
                  <div>
                    <textarea type="text" name="tag" rows="5" cols="40" readonly>span, iframe, input</textarea>
                  </div>
                </div>
                <div>
                  {{ t('markdown_setting.Tag attributes') }}
                  <div>
                    <textarea name="tagattribute" rows="5" cols="40" readonly>class, type, placeholder, name, required</textarea>
                  </div>
                </div>
              </div>

              <div id="xss3-hide-when-disabled" {%if !isXssEnabled %}style="display: none;" {% endif %}>
                <div>
                  {{ t('markdown_setting.Tag names') }}
                  <div>
                    <textarea type="text" name="tag" rows="5" cols="40" value="" placeholder="span, iframe, input"></textarea>
                    <input type="button" class="btn btn-default" value="おすすめ設定をインポート" />
                  </div>
                </div>
                <div>
                  {{ t('markdown_setting.Tag attributes') }}
                  <div>
                    <textarea name="tagattribute" rows="5" cols="40" value="" placeholder="class, type, placeholder, name, required"></textarea>
                    <input type="button" class="btn btn-default" value="おすすめ設定をインポート" />
                  </div>
                </div>
              </div>
            </fieldset>
          </div>

          <script>
            $('input[name="settingForm[security:xss-prevent:isEnabled]"]').change(function() {
              const isEnabled = ($(this).val() === "true");

              if (isEnabled) {
                $('#xss-hide-when-disabled').show(400);
              }
              else {
                $('#xss-hide-when-disabled').hide(400);
              }
            });

            $('input[name="settingForm[security:xss2-prevent:isEnabled]"]').change(function() {
              const isEnabled = ($(this).val() === "1");
              const isEnabled2 = ($(this).val() === "2");

              if (isEnabled) {
                $('#xss2-hide-when-disabled').hide(400);
                $('#xss3-hide-when-disabled').hide(400);
              }
              else if (isEnabled2) {
                $('#xss2-hide-when-disabled').show(400);
                $('#xss3-hide-when-disabled').hide(400);
              }
              else {
                $('#xss3-hide-when-disabled').show(400);
                $('#xss2-hide-when-disabled').hide(400);
              }
            });
          </script>

          <div class="form-group my-3">
            <div class="col-xs-offset-4 col-xs-5">
              <input type="hidden" name="_csrf" value="{{ csrf() }}">
              <button type="submit" class="btn btn-primary">{{ t("Update") }}</button>
            </div>
          </div>

        </fieldset>
      </form>

    </div>
  </div>

</div>
{% endblock content_main %}

{% block content_footer %}
{% endblock content_footer %}