78 lines
1.7 KiB
Ruby
78 lines
1.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
# Se encarga del contenido del artículo y quizás otros campos que
|
|
# requieran texto largo.
|
|
class MetadataContent < MetadataTemplate
|
|
def default_value
|
|
super || ''
|
|
end
|
|
|
|
def value
|
|
self[:value] || legacy_content || default_value
|
|
end
|
|
|
|
def front_matter?
|
|
false
|
|
end
|
|
|
|
def document_value
|
|
document.content
|
|
end
|
|
|
|
def indexable?
|
|
true && !private?
|
|
end
|
|
|
|
def to_s
|
|
sanitizer.sanitize value, tags: [], attributes: []
|
|
end
|
|
|
|
private
|
|
|
|
# Detectar si el contenido estaba en Markdown y pasarlo a HTML
|
|
def legacy_content
|
|
return unless document_value
|
|
return document_value if /^\s*</ =~ document_value
|
|
|
|
CommonMarker.render_doc(document_value, %i[FOOTNOTES UNSAFE], %i[table strikethrough autolink]).to_html
|
|
end
|
|
|
|
# Limpiar el HTML que recibimos
|
|
#
|
|
# TODO: En lugar de comprobar el Content Type acá, restringir los
|
|
# tipos de archivo a aceptar en ActiveStorage.
|
|
def sanitize(html_string)
|
|
html = Nokogiri::HTML.fragment(super html_string)
|
|
elements = 'img,audio,video,iframe'
|
|
|
|
# Eliminar elementos sin src y comprobar su origen
|
|
html.css(elements).each do |element|
|
|
unless element['src']
|
|
element.remove
|
|
next
|
|
end
|
|
|
|
begin
|
|
uri = URI element['src']
|
|
|
|
# No permitimos recursos externos
|
|
element.remove unless uri.hostname.end_with? Site.domain
|
|
rescue URI::Error
|
|
element.remove
|
|
end
|
|
end
|
|
|
|
# Eliminar figure sin contenido
|
|
html.css('figure').each do |figure|
|
|
figure.remove if figure.css(elements).empty?
|
|
end
|
|
|
|
# Los videos y audios necesitan controles
|
|
html.css('audio,video').each do |resource|
|
|
resource['controls'] = true
|
|
end
|
|
|
|
html.to_s.html_safe
|
|
end
|
|
end
|