mirror of
https://github.com/go-gitea/gitea.git
synced 2026-10-26 06:16:56 +09:00
Basavaraj S m
269b116b1b
The tags feed (`tags.rss` / `tags.atom`) lives in the tags route group, which only requires code read access, yet it lists every published release next to the plain tags and includes each release's title and rendered note. The releases page and `releases.rss` require releases read access, and the tags page only shows tag names to users without it, so the feed is the one place that leaks. A team member granted Code but not Releases on a private repo, or anyone on a public repo whose Releases unit is disabled, can read all release notes this way. I noticed it while comparing the feed routes with the tags template. When the doer cannot read releases, the feed now lists releases as plain tags, linking to `/src/tag/` like the tags page does.
320 lines
13 KiB
Go
320 lines
13 KiB
Go
// Copyright 2021 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package feed
|
|
|
|
import (
|
|
"fmt"
|
|
"html"
|
|
"html/template"
|
|
"net/http"
|
|
"net/url"
|
|
"strconv"
|
|
"strings"
|
|
|
|
activities_model "gitea.dev/models/activities"
|
|
"gitea.dev/models/renderhelper"
|
|
repo_model "gitea.dev/models/repo"
|
|
"gitea.dev/models/unit"
|
|
"gitea.dev/modules/markup"
|
|
"gitea.dev/modules/markup/markdown"
|
|
"gitea.dev/modules/setting"
|
|
"gitea.dev/modules/templates"
|
|
"gitea.dev/modules/util"
|
|
"gitea.dev/services/context"
|
|
|
|
"github.com/gorilla/feeds"
|
|
)
|
|
|
|
func toBranchLink(ctx *context.Context, act *activities_model.Action) string {
|
|
return act.GetRepoAbsoluteLink(ctx) + "/src/branch/" + util.PathEscapeSegments(act.GetBranch())
|
|
}
|
|
|
|
func toTagLink(ctx *context.Context, act *activities_model.Action) string {
|
|
return act.GetRepoAbsoluteLink(ctx) + "/src/tag/" + util.PathEscapeSegments(act.GetTag())
|
|
}
|
|
|
|
func toIssueLink(ctx *context.Context, act *activities_model.Action) string {
|
|
return act.GetRepoAbsoluteLink(ctx) + "/issues/" + url.PathEscape(act.GetIssueInfos()[0])
|
|
}
|
|
|
|
func toPullLink(ctx *context.Context, act *activities_model.Action) string {
|
|
return act.GetRepoAbsoluteLink(ctx) + "/pulls/" + url.PathEscape(act.GetIssueInfos()[0])
|
|
}
|
|
|
|
func toSrcLink(ctx *context.Context, act *activities_model.Action) string {
|
|
return act.GetRepoAbsoluteLink(ctx) + "/src/" + util.PathEscapeSegments(act.GetBranch())
|
|
}
|
|
|
|
func toReleaseLink(ctx *context.Context, act *activities_model.Action) string {
|
|
return act.GetRepoAbsoluteLink(ctx) + "/releases/tag/" + util.PathEscapeSegments(act.GetBranch())
|
|
}
|
|
|
|
// renderCommentMarkdown renders the comment markdown to html
|
|
func renderCommentMarkdown(ctx *context.Context, act *activities_model.Action, content string, feedExcerpt bool) template.HTML {
|
|
_ = act.LoadRepo(ctx)
|
|
if act.Repo == nil {
|
|
return ""
|
|
}
|
|
rctx := renderhelper.NewRenderContextRepoComment(ctx, act.Repo).WithUseAbsoluteLink(true)
|
|
rctx.RenderOptions.FeedExcerpt = feedExcerpt
|
|
rendered, err := markdown.RenderString(rctx, content)
|
|
if err != nil {
|
|
return ""
|
|
}
|
|
return rendered
|
|
}
|
|
|
|
// feedActionsToFeedItems convert gitea's Action feed to feeds Item
|
|
func feedActionsToFeedItems(ctx *context.Context, actions activities_model.ActionList) (items []*feeds.Item, err error) {
|
|
renderUtils := templates.NewRenderUtils(ctx)
|
|
for _, act := range actions {
|
|
act.LoadActUser(ctx)
|
|
|
|
// TODO: the code seems quite strange (maybe not right)
|
|
// sometimes it uses text content but sometimes it uses HTML content
|
|
// it should clearly defines which kind of content it should use for the feed items: plan text or rich HTML
|
|
var title, desc string
|
|
var content template.HTML
|
|
|
|
link := &feeds.Link{Href: act.GetCommentHTMLURL(ctx)}
|
|
|
|
// title
|
|
title = act.ActUser.GetDisplayName() + " "
|
|
var titleExtra template.HTML
|
|
switch act.OpType {
|
|
case activities_model.ActionCreateRepo:
|
|
titleExtra = ctx.Locale.Tr("action.create_repo", act.GetRepoAbsoluteLink(ctx), act.ShortRepoPath(ctx))
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
case activities_model.ActionRenameRepo:
|
|
titleExtra = ctx.Locale.Tr("action.rename_repo", act.GetContent(), act.GetRepoAbsoluteLink(ctx), act.ShortRepoPath(ctx))
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
case activities_model.ActionCommitRepo:
|
|
link.Href = toBranchLink(ctx, act)
|
|
if len(act.Content) != 0 {
|
|
titleExtra = ctx.Locale.Tr("action.commit_repo", act.GetRepoAbsoluteLink(ctx), link.Href, act.GetBranch(), act.ShortRepoPath(ctx))
|
|
} else {
|
|
titleExtra = ctx.Locale.Tr("action.create_branch", act.GetRepoAbsoluteLink(ctx), link.Href, act.GetBranch(), act.ShortRepoPath(ctx))
|
|
}
|
|
case activities_model.ActionCreateIssue:
|
|
link.Href = toIssueLink(ctx, act)
|
|
titleExtra = ctx.Locale.Tr("action.create_issue", link.Href, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionCreatePullRequest:
|
|
link.Href = toPullLink(ctx, act)
|
|
titleExtra = ctx.Locale.Tr("action.create_pull_request", link.Href, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionTransferRepo:
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
titleExtra = ctx.Locale.Tr("action.transfer_repo", act.GetContent(), act.GetRepoAbsoluteLink(ctx), act.ShortRepoPath(ctx))
|
|
case activities_model.ActionPushTag:
|
|
link.Href = toTagLink(ctx, act)
|
|
titleExtra = ctx.Locale.Tr("action.push_tag", act.GetRepoAbsoluteLink(ctx), link.Href, act.GetTag(), act.ShortRepoPath(ctx))
|
|
case activities_model.ActionCommentIssue:
|
|
issueLink := toIssueLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = issueLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.comment_issue", issueLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionMergePullRequest:
|
|
pullLink := toPullLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = pullLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.merge_pull_request", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionAutoMergePullRequest:
|
|
pullLink := toPullLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = pullLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.auto_merge_pull_request", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionCloseIssue:
|
|
issueLink := toIssueLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = issueLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.close_issue", issueLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionReopenIssue:
|
|
issueLink := toIssueLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = issueLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.reopen_issue", issueLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionClosePullRequest:
|
|
pullLink := toPullLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = pullLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.close_pull_request", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionReopenPullRequest:
|
|
pullLink := toPullLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = pullLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.reopen_pull_request", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionDeleteTag:
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
titleExtra = ctx.Locale.Tr("action.delete_tag", act.GetRepoAbsoluteLink(ctx), act.GetTag(), act.ShortRepoPath(ctx))
|
|
case activities_model.ActionDeleteBranch:
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
titleExtra = ctx.Locale.Tr("action.delete_branch", act.GetRepoAbsoluteLink(ctx), html.EscapeString(act.GetBranch()), act.ShortRepoPath(ctx))
|
|
case activities_model.ActionMirrorSyncPush:
|
|
srcLink := toSrcLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = srcLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.mirror_sync_push", act.GetRepoAbsoluteLink(ctx), srcLink, act.RefName, act.ShortRepoPath(ctx))
|
|
case activities_model.ActionMirrorSyncCreate:
|
|
srcLink := toSrcLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = srcLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.mirror_sync_create", act.GetRepoAbsoluteLink(ctx), srcLink, act.RefName, act.ShortRepoPath(ctx))
|
|
case activities_model.ActionMirrorSyncDelete:
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
titleExtra = ctx.Locale.Tr("action.mirror_sync_delete", act.GetRepoAbsoluteLink(ctx), act.RefName, act.ShortRepoPath(ctx))
|
|
case activities_model.ActionApprovePullRequest:
|
|
pullLink := toPullLink(ctx, act)
|
|
titleExtra = ctx.Locale.Tr("action.approve_pull_request", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionRejectPullRequest:
|
|
pullLink := toPullLink(ctx, act)
|
|
titleExtra = ctx.Locale.Tr("action.reject_pull_request", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionCommentPull:
|
|
pullLink := toPullLink(ctx, act)
|
|
titleExtra = ctx.Locale.Tr("action.comment_pull", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx))
|
|
case activities_model.ActionPublishRelease:
|
|
releaseLink := toReleaseLink(ctx, act)
|
|
if link.Href == "#" {
|
|
link.Href = releaseLink
|
|
}
|
|
titleExtra = ctx.Locale.Tr("action.publish_release", act.GetRepoAbsoluteLink(ctx), releaseLink, act.ShortRepoPath(ctx), act.Content)
|
|
case activities_model.ActionPullReviewDismissed:
|
|
pullLink := toPullLink(ctx, act)
|
|
titleExtra = ctx.Locale.Tr("action.review_dismissed", pullLink, act.GetIssueInfos()[0], act.ShortRepoPath(ctx), act.GetIssueInfos()[1])
|
|
case activities_model.ActionStarRepo:
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
titleExtra = ctx.Locale.Tr("action.starred_repo", act.GetRepoAbsoluteLink(ctx), act.GetRepoPath(ctx))
|
|
case activities_model.ActionWatchRepo:
|
|
link.Href = act.GetRepoAbsoluteLink(ctx)
|
|
titleExtra = ctx.Locale.Tr("action.watched_repo", act.GetRepoAbsoluteLink(ctx), act.GetRepoPath(ctx))
|
|
default:
|
|
return nil, fmt.Errorf("unknown action type: %v", act.OpType)
|
|
}
|
|
|
|
// description & content
|
|
{
|
|
switch act.OpType {
|
|
case activities_model.ActionCommitRepo, activities_model.ActionMirrorSyncPush:
|
|
push := templates.ActionContent2Commits(act)
|
|
_ = act.LoadRepo(ctx)
|
|
for _, commit := range push.Commits {
|
|
if len(desc) != 0 {
|
|
desc += "\n\n"
|
|
}
|
|
desc += fmt.Sprintf("<a href=\"%s\">%s</a>\n%s",
|
|
html.EscapeString(fmt.Sprintf("%s/commit/%s", act.GetRepoAbsoluteLink(ctx), commit.Sha1)),
|
|
commit.Sha1,
|
|
renderUtils.RenderCommitMessage(commit.Message, act.Repo),
|
|
)
|
|
}
|
|
|
|
if push.Len > 1 {
|
|
link = &feeds.Link{Href: fmt.Sprintf("%s/%s", setting.AppSubURL, push.CompareURL)}
|
|
} else if push.Len == 1 {
|
|
link = &feeds.Link{Href: fmt.Sprintf("%s/commit/%s", act.GetRepoAbsoluteLink(ctx), push.Commits[0].Sha1)}
|
|
}
|
|
|
|
case activities_model.ActionCreateIssue, activities_model.ActionCreatePullRequest:
|
|
desc = strings.Join(act.GetIssueInfos(), "#")
|
|
content = renderCommentMarkdown(ctx, act, act.GetIssueContent(ctx), false)
|
|
case activities_model.ActionCommentIssue, activities_model.ActionApprovePullRequest, activities_model.ActionRejectPullRequest, activities_model.ActionCommentPull:
|
|
desc = act.GetIssueTitle(ctx)
|
|
comment := act.GetIssueInfos()[1]
|
|
if len(comment) != 0 {
|
|
desc += "\n\n" + string(renderCommentMarkdown(ctx, act, comment, true))
|
|
}
|
|
case activities_model.ActionMergePullRequest, activities_model.ActionAutoMergePullRequest:
|
|
desc = act.GetIssueInfos()[1]
|
|
case activities_model.ActionCloseIssue, activities_model.ActionReopenIssue, activities_model.ActionClosePullRequest, activities_model.ActionReopenPullRequest:
|
|
desc = act.GetIssueTitle(ctx)
|
|
case activities_model.ActionPullReviewDismissed:
|
|
desc = ctx.Locale.TrString("action.review_dismissed_reason") + "\n\n" + act.GetIssueInfos()[2]
|
|
}
|
|
}
|
|
if len(content) == 0 {
|
|
content = markup.Sanitize(desc)
|
|
}
|
|
|
|
items = append(items, &feeds.Item{
|
|
Title: template.HTMLEscapeString(title) + string(titleExtra),
|
|
Link: link,
|
|
Description: desc,
|
|
IsPermaLink: "false",
|
|
Author: &feeds.Author{
|
|
Name: act.ActUser.GetDisplayName(),
|
|
Email: act.ActUser.GetEmail(),
|
|
},
|
|
Id: fmt.Sprintf("%v: %v", strconv.FormatInt(act.ID, 10), link.Href),
|
|
Created: act.CreatedUnix.AsTime(),
|
|
Content: string(content),
|
|
})
|
|
}
|
|
return items, err
|
|
}
|
|
|
|
// GetFeedType return if it is a feed request and altered name and feed type.
|
|
func GetFeedType(name string, req *http.Request) (showFeed bool, feedType string) {
|
|
if strings.HasSuffix(name, ".rss") ||
|
|
strings.Contains(req.Header.Get("Accept"), "application/rss+xml") {
|
|
return true, "rss"
|
|
}
|
|
|
|
if strings.HasSuffix(name, ".atom") ||
|
|
strings.Contains(req.Header.Get("Accept"), "application/atom+xml") {
|
|
return true, "atom"
|
|
}
|
|
|
|
return false, ""
|
|
}
|
|
|
|
// feedActionsToFeedItems convert gitea's Repo's Releases to feeds Item
|
|
func releasesToFeedItems(ctx *context.Context, releases []*repo_model.Release) (items []*feeds.Item, err error) {
|
|
canReadReleases := ctx.Repo.Permission.CanRead(unit.TypeReleases)
|
|
for _, rel := range releases {
|
|
err := rel.LoadAttributes(ctx)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
var content template.HTML
|
|
title := rel.TagName
|
|
link := &feeds.Link{Href: rel.HTMLURL()}
|
|
|
|
if !canReadReleases {
|
|
// the tags feed only requires code access, so list releases as plain tags like the tags page does
|
|
link.Href = rel.Repo.HTMLURL() + "/src/tag/" + util.PathEscapeSegments(rel.TagName)
|
|
} else {
|
|
if !rel.IsTag {
|
|
title = rel.Title
|
|
}
|
|
rctx := renderhelper.NewRenderContextRepoComment(ctx, rel.Repo).WithUseAbsoluteLink(true)
|
|
content, err = markdown.RenderString(rctx, rel.Note)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
}
|
|
|
|
items = append(items, &feeds.Item{
|
|
Title: title,
|
|
Link: link,
|
|
Created: rel.PublishedUnix.AsTime(),
|
|
Author: &feeds.Author{
|
|
Name: rel.Publisher.GetDisplayName(),
|
|
Email: rel.Publisher.GetEmail(),
|
|
},
|
|
Id: fmt.Sprintf("%v: %v", strconv.FormatInt(rel.ID, 10), link.Href),
|
|
Content: string(content),
|
|
})
|
|
}
|
|
|
|
return items, err
|
|
}
|