class NotificationFactory::Renderer
=begin
examples how to use
message_subject = NotificationFactory::Renderer.new(
objects: {
ticket: Ticket.first,
},
locale: 'de-de',
timezone: 'America/Port-au-Prince',
template: 'some template #{ticket.title} {config.fqdn}',
escape: false
).render
message_body = NotificationFactory::Renderer.new(
objects: {
ticket: Ticket.first,
},
locale: 'de-de',
timezone: 'America/Port-au-Prince',
template: 'some template #{ticket.title} #{config.fqdn}',
).render
=end
def initialize(objects:, locale: nil, timezone: nil, template:, escape: true)
@objects = objects
@locale = locale || Locale.default
@timezone = timezone || Setting.get('timezone_default')
@template = NotificationFactory::Template.new(template, escape)
@escape = escape
end
def render
ERB.new(@template.to_s).result(binding)
end
# d - data of object
# d('user.firstname', htmlEscape)
def d(key, escape = nil)
# do validation, ignore some methods
return "\#{#{key} / not allowed}" if !data_key_valid?(key)
# aliases
map = {
'article.body' => 'article.body_as_text_with_quote.text2html',
}
if map[key]
key = map[key]
end
# escape in html mode
if escape
no_escape = {
'article.body_as_html' => true,
'article.body_as_text_with_quote.text2html' => true,
}
if no_escape[key]
escape = false
end
end
value = nil
object_methods = key.split('.')
object_name = object_methods.shift
# if no object is given, just return
return '#{no such object}' if object_name.blank? # rubocop:disable Lint/InterpolationCheck
object_refs = @objects[object_name] || @objects[object_name.to_sym]
# if object is not in available objects, just return
return "\#{#{object_name} / no such object}" if !object_refs
# if content of method is a complex datatype, just return
if object_methods.blank? && object_refs.class != String && object_refs.class != Float && object_refs.class != Integer
return "\#{#{key} / no such method}"
end
previous_object_refs = ''
object_methods_s = ''
object_methods.each do |method_raw|
method = method_raw.strip
if method == 'value'
temp = object_refs
object_refs = display_value(previous_object_refs, method, object_methods_s, object_refs)
previous_object_refs = temp
end
if object_methods_s != ''
object_methods_s += '.'
end
object_methods_s += method
next if method == 'value'
if object_methods_s == ''
value = "\#{#{object_name}.#{object_methods_s} / no such method}"
break
end
arguments = nil
if /\A(?[^\(]+)\((?[^\)]+)\)\z/ =~ method
if parameter != parameter.to_i.to_s
value = "\#{#{object_name}.#{object_methods_s} / invalid parameter: #{parameter}}"
break
end
begin
arguments = Array(parameter.to_i)
method = method_id
rescue
value = "\#{#{object_name}.#{object_methods_s} / #{e.message}}"
break
end
end
# if method exists
if !object_refs.respond_to?(method.to_sym)
value = "\#{#{object_name}.#{object_methods_s} / no such method}"
break
end
begin
previous_object_refs = object_refs
object_refs = object_refs.send(method.to_sym, *arguments)
# body_as_html should trigger the cloning of all inline attachments from the parent article (issue #2399)
if method.to_sym == :body_as_html && previous_object_refs.respond_to?(:should_clone_inline_attachments)
previous_object_refs.should_clone_inline_attachments = true
end
rescue => e
value = "\#{#{object_name}.#{object_methods_s} / #{e.message}}"
break
end
end
placeholder = if !value
object_refs
else
value
end
escaping(convert_to_timezone(placeholder), escape)
end
# c - config
# c('fqdn', htmlEscape)
def c(key, escape = nil)
config = Setting.get(key)
escaping(config, escape)
end
# t - translation
# t('yes', htmlEscape)
def t(key, escape = nil)
translation = Translation.translate(@locale, key)
escaping(translation, escape)
end
# h - htmlEscape
# h(htmlEscape)
def h(value)
return value if !value
CGI.escapeHTML(convert_to_timezone(value).to_s)
end
private
def convert_to_timezone(value)
return Translation.timestamp(@locale, @timezone, value) if value.class == ActiveSupport::TimeWithZone
return Translation.date(@locale, value) if value.class == Date
value
end
def escaping(key, escape)
return key if escape == false
return key if escape.nil? && !@escape
h key
end
def data_key_valid?(key)
return false if key =~ /`|\.(|\s*)(save|destroy|delete|remove|drop|update|create|new|all|where|find|raise|dump|rollback|freeze)/i && key !~ /(update|create)d_(at|by)/i
true
end
def display_value(object, method_name, previous_method_names, key)
return key if method_name != 'value' ||
!key.instance_of?(String)
attributes = ObjectManager::Attribute
.where(object_lookup_id: ObjectLookup.by_name(object.class.to_s))
.where(name: previous_method_names.split('.').last)
return key if attributes.count.zero? || attributes.first.data_type != 'select'
attributes.first.data_option['options'][key] || key
end
end