// Copyright 2018 The Gitea Authors. All rights reserved. // SPDX-License-Identifier: MIT package markup import ( "bufio" "bytes" "fmt" "html" "io" "regexp" "strconv" "code.gitea.io/gitea/modules/csv" "code.gitea.io/gitea/modules/markup" "code.gitea.io/gitea/modules/setting" ) func init() { markup.RegisterRenderer(Renderer{}) } // Renderer implements markup.Renderer for csv files type Renderer struct{} // Name implements markup.Renderer func (Renderer) Name() string { return "csv" } // Extensions implements markup.Renderer func (Renderer) Extensions() []string { return []string{".csv", ".tsv"} } // SanitizerRules implements markup.Renderer func (Renderer) SanitizerRules() []setting.MarkupSanitizerRule { return []setting.MarkupSanitizerRule{ {Element: "table", AllowAttr: "class", Regexp: regexp.MustCompile(`data-table`)}, {Element: "th", AllowAttr: "class", Regexp: regexp.MustCompile(`line-num`)}, {Element: "td", AllowAttr: "class", Regexp: regexp.MustCompile(`line-num`)}, } } func writeField(w io.Writer, element, class, field string) error { if _, err := io.WriteString(w, "<"); err != nil { return err } if _, err := io.WriteString(w, element); err != nil { return err } if len(class) > 0 { if _, err := io.WriteString(w, " class=\""); err != nil { return err } if _, err := io.WriteString(w, class); err != nil { return err } if _, err := io.WriteString(w, "\""); err != nil { return err } } if _, err := io.WriteString(w, ">"); err != nil { return err } if _, err := io.WriteString(w, html.EscapeString(field)); err != nil { return err } if _, err := io.WriteString(w, ""); err != nil { return err } if _, err := io.WriteString(w, element); err != nil { return err } _, err := io.WriteString(w, ">") return err } // Render implements markup.Renderer func (r Renderer) Render(ctx *markup.RenderContext, input io.Reader, output io.Writer) error { tmpBlock := bufio.NewWriter(output) maxSize := setting.UI.CSV.MaxFileSize if maxSize == 0 { return r.tableRender(ctx, input, tmpBlock) } rawBytes, err := io.ReadAll(io.LimitReader(input, maxSize+1)) if err != nil { return err } if int64(len(rawBytes)) <= maxSize { return r.tableRender(ctx, bytes.NewReader(rawBytes), tmpBlock) } return r.fallbackRender(io.MultiReader(bytes.NewReader(rawBytes), input), tmpBlock) } func (Renderer) fallbackRender(input io.Reader, tmpBlock *bufio.Writer) error { _, err := tmpBlock.WriteString("
") if err != nil { return err } scan := bufio.NewScanner(input) scan.Split(bufio.ScanRunes) for scan.Scan() { switch scan.Text() { case `&`: _, err = tmpBlock.WriteString("&") case `'`: _, err = tmpBlock.WriteString("'") // "'" is shorter than "'" and apos was not in HTML until HTML5. case `<`: _, err = tmpBlock.WriteString("<") case `>`: _, err = tmpBlock.WriteString(">") case `"`: _, err = tmpBlock.WriteString(""") // """ is shorter than """. default: _, err = tmpBlock.Write(scan.Bytes()) } if err != nil { return err } } if err = scan.Err(); err != nil { return fmt.Errorf("fallbackRender scan: %w", err) } _, err = tmpBlock.WriteString("") if err != nil { return err } return tmpBlock.Flush() } func (Renderer) tableRender(ctx *markup.RenderContext, input io.Reader, tmpBlock *bufio.Writer) error { rd, err := csv.CreateReaderAndDetermineDelimiter(ctx, input) if err != nil { return err } if _, err := tmpBlock.WriteString(`