]> Untitled Git - lemmy.git/blob - crates/api_crud/src/private_message/create.rs
Sanitize html (#3708)
[lemmy.git] / crates / api_crud / src / private_message / create.rs
1 use crate::PerformCrud;
2 use actix_web::web::Data;
3 use lemmy_api_common::{
4   context::LemmyContext,
5   private_message::{CreatePrivateMessage, PrivateMessageResponse},
6   utils::{
7     check_person_block,
8     generate_local_apub_endpoint,
9     get_interface_language,
10     local_site_to_slur_regex,
11     local_user_view_from_jwt,
12     sanitize_html,
13     send_email_to_user,
14     EndpointType,
15   },
16 };
17 use lemmy_db_schema::{
18   source::{
19     local_site::LocalSite,
20     private_message::{PrivateMessage, PrivateMessageInsertForm, PrivateMessageUpdateForm},
21   },
22   traits::Crud,
23 };
24 use lemmy_db_views::structs::{LocalUserView, PrivateMessageView};
25 use lemmy_utils::{
26   error::{LemmyError, LemmyErrorExt, LemmyErrorType},
27   utils::{slurs::remove_slurs, validation::is_valid_body_field},
28 };
29
30 #[async_trait::async_trait(?Send)]
31 impl PerformCrud for CreatePrivateMessage {
32   type Response = PrivateMessageResponse;
33
34   #[tracing::instrument(skip(self, context))]
35   async fn perform(
36     &self,
37     context: &Data<LemmyContext>,
38   ) -> Result<PrivateMessageResponse, LemmyError> {
39     let data: &CreatePrivateMessage = self;
40     let local_user_view = local_user_view_from_jwt(&data.auth, context).await?;
41     let local_site = LocalSite::read(&mut context.pool()).await?;
42
43     let content = sanitize_html(&data.content);
44     let content = remove_slurs(&content, &local_site_to_slur_regex(&local_site));
45     is_valid_body_field(&Some(content.clone()), false)?;
46
47     check_person_block(
48       local_user_view.person.id,
49       data.recipient_id,
50       &mut context.pool(),
51     )
52     .await?;
53
54     let private_message_form = PrivateMessageInsertForm::builder()
55       .content(content.clone())
56       .creator_id(local_user_view.person.id)
57       .recipient_id(data.recipient_id)
58       .build();
59
60     let inserted_private_message =
61       PrivateMessage::create(&mut context.pool(), &private_message_form)
62         .await
63         .with_lemmy_type(LemmyErrorType::CouldntCreatePrivateMessage)?;
64
65     let inserted_private_message_id = inserted_private_message.id;
66     let protocol_and_hostname = context.settings().get_protocol_and_hostname();
67     let apub_id = generate_local_apub_endpoint(
68       EndpointType::PrivateMessage,
69       &inserted_private_message_id.to_string(),
70       &protocol_and_hostname,
71     )?;
72     PrivateMessage::update(
73       &mut context.pool(),
74       inserted_private_message.id,
75       &PrivateMessageUpdateForm::builder()
76         .ap_id(Some(apub_id))
77         .build(),
78     )
79     .await
80     .with_lemmy_type(LemmyErrorType::CouldntCreatePrivateMessage)?;
81
82     let view = PrivateMessageView::read(&mut context.pool(), inserted_private_message.id).await?;
83
84     // Send email to the local recipient, if one exists
85     if view.recipient.local {
86       let recipient_id = data.recipient_id;
87       let local_recipient = LocalUserView::read_person(&mut context.pool(), recipient_id).await?;
88       let lang = get_interface_language(&local_recipient);
89       let inbox_link = format!("{}/inbox", context.settings().get_protocol_and_hostname());
90       let sender_name = &local_user_view.person.name;
91       send_email_to_user(
92         &local_recipient,
93         &lang.notification_private_message_subject(sender_name),
94         &lang.notification_private_message_body(inbox_link, &content, sender_name),
95         context.settings(),
96       )
97       .await;
98     }
99
100     Ok(PrivateMessageResponse {
101       private_message_view: view,
102     })
103   }
104 }