Files
mce/templates/admin/html/posts/index.html
Victor_Jay 53f18ca6ee fix: CSP 策略移除 unsafe-inline,改用 nonce 机制
- SecurityHeaders 中间件生成随机 nonce,注入 context
- BuildPageData/BuildAdminPageData 将 CSPNonce 传递给模板
- 所有 19 个模板文件 <script> 标签添加 nonce 属性
- 移除所有内联事件处理(onclick/onerror),改用事件监听
- 移除所有 javascript:void(0) 链接,改用 # 号 + preventDefault
- utils.js 添加全局 avatar 图片加载失败回退处理
- common.js 登出按钮添加 preventDefault
- audit.js 关闭弹窗按钮改用事件监听
2026-06-02 16:10:23 +08:00

87 lines
4.6 KiB
HTML

{{template "admin/layout/base.html" .}}
<div class="page-header">
<h1>内容管理</h1>
<p class="page-desc">管理所有社区帖子</p>
</div>
<div class="admin-filter-bar">
<form class="filter-form" method="GET" action="/admin/posts">
<input type="text" name="keyword" value="{{.Keyword}}" placeholder="搜索标题..." class="form-input filter-input">
<select name="status" class="form-select filter-select">
<option value="">全部状态</option>
<option value="draft" {{if eq .Status "draft"}}selected{{end}}>草稿</option>
<option value="pending" {{if eq .Status "pending"}}selected{{end}}>待审核</option>
<option value="approved" {{if eq .Status "approved"}}selected{{end}}>已发布</option>
<option value="rejected" {{if eq .Status "rejected"}}selected{{end}}>已退回</option>
</select>
<button type="submit" class="btn btn-primary">搜索</button>
</form>
</div>
{{if .Error}}
<div class="error-message">{{.Error}}</div>
{{end}}
<table class="admin-table">
<thead>
<tr>
<th>ID</th>
<th>标题</th>
<th>作者</th>
<th>状态</th>
<th>时间</th>
<th>操作</th>
</tr>
</thead>
<tbody>
{{if eq (len .Posts) 0}}
<tr><td colspan="6" class="empty">暂无帖子</td></tr>
{{end}}
{{range .Posts}}
<tr class="post-row">
<td>{{.ID}}</td>
<td><a href="/posts/{{.ID}}" target="_blank" class="post-link">{{.Title}}</a>{{if .PendingBody}} <span class="revision-badge">修订中</span>{{end}}</td>
<td>{{if .AuthorName}}{{.AuthorName}}({{.UserID}}){{else}}UID{{.UserID}}{{end}}</td>
<td><span class="status-badge status-{{.Status}}">{{index $.StatusNames .Status}}</span>{{if .IsLocked}} <span class="status-badge status-locked">已锁定</span>{{end}}</td>
<td>{{.CreatedAt.Format "2006-01-02 15:04"}}</td>
<td class="actions-cell">
<div class="action-btns">
{{if eq .Status "pending"}}
<button class="btn btn-sm btn-success post-approve" data-id="{{.ID}}">通过</button>
<button class="btn btn-sm btn-warning post-reject" data-id="{{.ID}}">退回</button>
{{end}}
{{if and (eq .Status "approved") (not .PendingBody)}}
<button class="btn btn-sm btn-warning post-reject" data-id="{{.ID}}">退回</button>
{{end}}
{{if and (eq .Status "approved") .PendingBody}}
<button class="btn btn-sm btn-success post-approve" data-id="{{.ID}}">通过修订</button>
<button class="btn btn-sm btn-warning post-reject" data-id="{{.ID}}">退回修订</button>
{{end}}
{{if and (not .IsLocked) (ne .Status "pending")}}
<button class="btn btn-sm btn-danger post-lock" data-id="{{.ID}}">锁定</button>
{{end}}
{{if .IsLocked}}
<button class="btn btn-sm btn-success post-unlock" data-id="{{.ID}}">解锁</button>
{{end}}
</div>
</td>
</tr>
{{end}}
</tbody>
</table>
{{if gt .TotalPages 1}}
<div class="pagination">
{{if gt .Page 1}}
<a href="?page={{.PrevPage}}{{if .Keyword}}&keyword={{.Keyword}}{{end}}{{if .Status}}&status={{.Status}}{{end}}" class="page-link">上一页</a>
{{end}}
<span class="page-info">第 {{.Page}} / {{.TotalPages}} 页 (共 {{.Total}} 条)</span>
{{if lt .Page .TotalPages}}
<a href="?page={{.NextPage}}{{if .Keyword}}&keyword={{.Keyword}}{{end}}{{if .Status}}&status={{.Status}}{{end}}" class="page-link">下一页</a>
{{end}}
</div>
{{end}}
<script src="/admin/static/js/posts.js?v={{assetV "/admin/static/js/posts.js"}}" nonce="{{.CSPNonce}}"></script>
{{template "admin/layout/footer.html" .}}