Victor_Jay
22a302315a
- 移除 wangEditor 5 库文件（1.27MB JS + 14KB CSS，含手动 hack） - 集成 ByteMD 1.22.0（基于 CodeMirror 5，不依赖 contentEditable） - 编辑器输出 Markdown 原文，后端 goldmark + bluemonday 双重防护渲染 HTML - 删除 editor.js 中 scrollIntoView hack、code-lang-label DOM 注入、PreviewAPI 调用 - 清理 posts.css 中 ~200 行 wangEditor 样式覆盖（w-e-* 类名） - 清理 show.html 中 code-lang-label JS 注入（goldmark 自带 language-xxx class） - 更新 CSP 安全策略：移除 CodeMirror 注释，保留 esm.sh CDN - go.mod：bluemonday 和 goldmark 均保留为直接依赖（纵深防御）
74 lines
2.6 KiB
HTML
74 lines
2.6 KiB
HTML
{{template "layout/header.html" .}}
|
|
<body>
|
|
|
|
{{template "layout/nav.html" .}}
|
|
|
|
<div class="container post-detail">
|
|
<article class="post-article">
|
|
<header class="post-detail-header">
|
|
<h1 class="post-detail-title">{{.Post.Title}}</h1>
|
|
<div class="post-detail-meta">
|
|
<span class="post-author">{{if .Post.AuthorName}}{{.Post.AuthorName}}{{else}}UID{{.Post.UserID}}{{end}}</span>
|
|
<span class="post-time">{{.Post.CreatedAt.Format "2006-01-02 15:04"}}</span>
|
|
{{if ne .Post.Status "approved"}}
|
|
<span class="post-status post-status-{{.Post.Status}}">{{index $.StatusNames .Post.Status}}</span>
|
|
{{end}}
|
|
</div>
|
|
</header>
|
|
|
|
<div class="post-detail-body">
|
|
{{.PostBodyHTML}}
|
|
{{/* 如果 BodyHTML 为空，直接显示原文 */}}
|
|
</div>
|
|
{{if not .PostBodyHTML}}
|
|
<div class="post-detail-body-raw">{{.Post.Body}}</div>
|
|
{{end}}
|
|
|
|
{{if .Post.RejectReason}}
|
|
<div class="post-reject-reason">
|
|
<strong>退回理由：</strong>{{.Post.RejectReason}}
|
|
</div>
|
|
{{end}}
|
|
</article>
|
|
|
|
{{if .IsLoggedIn}}
|
|
<div class="post-actions">
|
|
{{if and $.Post (or (eq $.Post.UserID $.UID) $.CanAccessAdmin) (ne $.Post.Status "pending") (ne $.Post.Status "locked")}}
|
|
<a href="/posts/{{$.Post.ID}}/edit" class="btn btn-secondary">编辑</a>
|
|
{{end}}
|
|
{{if and $.Post (eq $.Post.UserID $.UID) (or (eq $.Post.Status "draft") (eq $.Post.Status "rejected"))}}
|
|
<button class="btn btn-primary" id="submitAuditBtn" data-id="{{$.Post.ID}}">提交审核</button>
|
|
{{end}}
|
|
</div>
|
|
{{end}}
|
|
</div>
|
|
|
|
{{template "layout/footer.html" .}}
|
|
|
|
<script src="/static/js/common.js"></script>
|
|
<script>
|
|
(function() {
|
|
var btn = document.getElementById('submitAuditBtn');
|
|
if (!btn) return;
|
|
btn.addEventListener('click', function() {
|
|
if (!confirm('确认提交审核？审核通过后将公开发布。')) return;
|
|
var csrf = document.querySelector('meta[name="csrf-token"]');
|
|
fetch('/api/posts/' + btn.dataset.id + '/submit', {
|
|
method: 'POST',
|
|
headers: {
|
|
'Content-Type': 'application/json',
|
|
'X-CSRF-Token': csrf ? csrf.getAttribute('content') : ''
|
|
}
|
|
})
|
|
.then(function(r) { return r.json(); })
|
|
.then(function(d) {
|
|
if (d.success) { window.location.reload(); }
|
|
else { alert(d.message || '提交失败'); }
|
|
})
|
|
.catch(function() { alert('请求失败'); });
|
|
});
|
|
})();
|
|
</script>
|
|
</body>
|
|
</html>
|