]> Untitled Git - lemmy.git/blob - crates/api/src/post_report/create.rs
Sanitize html (#3708)
[lemmy.git] / crates / api / src / post_report / create.rs
1 use crate::{check_report_reason, Perform};
2 use actix_web::web::Data;
3 use lemmy_api_common::{
4   context::LemmyContext,
5   post::{CreatePostReport, PostReportResponse},
6   utils::{
7     check_community_ban,
8     local_user_view_from_jwt,
9     sanitize_html,
10     send_new_report_email_to_admins,
11   },
12 };
13 use lemmy_db_schema::{
14   source::{
15     local_site::LocalSite,
16     post_report::{PostReport, PostReportForm},
17   },
18   traits::Reportable,
19 };
20 use lemmy_db_views::structs::{PostReportView, PostView};
21 use lemmy_utils::error::{LemmyError, LemmyErrorExt, LemmyErrorType};
22
23 /// Creates a post report and notifies the moderators of the community
24 #[async_trait::async_trait(?Send)]
25 impl Perform for CreatePostReport {
26   type Response = PostReportResponse;
27
28   #[tracing::instrument(skip(context))]
29   async fn perform(&self, context: &Data<LemmyContext>) -> Result<PostReportResponse, LemmyError> {
30     let data: &CreatePostReport = self;
31     let local_user_view = local_user_view_from_jwt(&data.auth, context).await?;
32     let local_site = LocalSite::read(&mut context.pool()).await?;
33
34     let reason = sanitize_html(self.reason.trim());
35     check_report_reason(&reason, &local_site)?;
36
37     let person_id = local_user_view.person.id;
38     let post_id = data.post_id;
39     let post_view = PostView::read(&mut context.pool(), post_id, None, None).await?;
40
41     check_community_ban(person_id, post_view.community.id, &mut context.pool()).await?;
42
43     let report_form = PostReportForm {
44       creator_id: person_id,
45       post_id,
46       original_post_name: post_view.post.name,
47       original_post_url: post_view.post.url,
48       original_post_body: post_view.post.body,
49       reason,
50     };
51
52     let report = PostReport::report(&mut context.pool(), &report_form)
53       .await
54       .with_lemmy_type(LemmyErrorType::CouldntCreateReport)?;
55
56     let post_report_view = PostReportView::read(&mut context.pool(), report.id, person_id).await?;
57
58     // Email the admins
59     if local_site.reports_email_admins {
60       send_new_report_email_to_admins(
61         &post_report_view.creator.name,
62         &post_report_view.post_creator.name,
63         &mut context.pool(),
64         context.settings(),
65       )
66       .await?;
67     }
68
69     Ok(PostReportResponse { post_report_view })
70   }
71 }