]> Untitled Git - lemmy.git/blob - crates/apub/src/protocol/objects/group.rs
Sanitize html (#3708)
[lemmy.git] / crates / apub / src / protocol / objects / group.rs
1 use crate::{
2   check_apub_id_valid_with_strictness,
3   collections::{
4     community_featured::ApubCommunityFeatured,
5     community_moderators::ApubCommunityModerators,
6     community_outbox::ApubCommunityOutbox,
7   },
8   local_site_data_cached,
9   objects::{community::ApubCommunity, read_from_string_or_source_opt},
10   protocol::{
11     objects::{Endpoints, LanguageTag},
12     ImageObject,
13     Source,
14   },
15 };
16 use activitypub_federation::{
17   fetch::{collection_id::CollectionId, object_id::ObjectId},
18   kinds::actor::GroupType,
19   protocol::{
20     helpers::deserialize_skip_error,
21     public_key::PublicKey,
22     verification::verify_domains_match,
23   },
24 };
25 use chrono::{DateTime, FixedOffset};
26 use lemmy_api_common::{
27   context::LemmyContext,
28   utils::{local_site_opt_to_slur_regex, sanitize_html, sanitize_html_opt},
29 };
30 use lemmy_db_schema::{
31   newtypes::InstanceId,
32   source::community::{CommunityInsertForm, CommunityUpdateForm},
33   utils::naive_now,
34 };
35 use lemmy_utils::{
36   error::LemmyError,
37   utils::slurs::{check_slurs, check_slurs_opt},
38 };
39 use serde::{Deserialize, Serialize};
40 use serde_with::skip_serializing_none;
41 use std::fmt::Debug;
42 use url::Url;
43
44 #[skip_serializing_none]
45 #[derive(Clone, Debug, Deserialize, Serialize)]
46 #[serde(rename_all = "camelCase")]
47 pub struct Group {
48   #[serde(rename = "type")]
49   pub(crate) kind: GroupType,
50   pub(crate) id: ObjectId<ApubCommunity>,
51   /// username, set at account creation and usually fixed after that
52   pub(crate) preferred_username: String,
53   pub(crate) inbox: Url,
54   pub(crate) followers: Url,
55   pub(crate) public_key: PublicKey,
56
57   /// title
58   pub(crate) name: Option<String>,
59   pub(crate) summary: Option<String>,
60   #[serde(deserialize_with = "deserialize_skip_error", default)]
61   pub(crate) source: Option<Source>,
62   pub(crate) icon: Option<ImageObject>,
63   /// banner
64   pub(crate) image: Option<ImageObject>,
65   // lemmy extension
66   pub(crate) sensitive: Option<bool>,
67   #[serde(deserialize_with = "deserialize_skip_error", default)]
68   pub(crate) attributed_to: Option<CollectionId<ApubCommunityModerators>>,
69   // lemmy extension
70   pub(crate) posting_restricted_to_mods: Option<bool>,
71   pub(crate) outbox: CollectionId<ApubCommunityOutbox>,
72   pub(crate) endpoints: Option<Endpoints>,
73   pub(crate) featured: Option<CollectionId<ApubCommunityFeatured>>,
74   #[serde(default)]
75   pub(crate) language: Vec<LanguageTag>,
76   pub(crate) published: Option<DateTime<FixedOffset>>,
77   pub(crate) updated: Option<DateTime<FixedOffset>>,
78 }
79
80 impl Group {
81   pub(crate) async fn verify(
82     &self,
83     expected_domain: &Url,
84     context: &LemmyContext,
85   ) -> Result<(), LemmyError> {
86     check_apub_id_valid_with_strictness(self.id.inner(), true, context).await?;
87     verify_domains_match(expected_domain, self.id.inner())?;
88
89     let local_site_data = local_site_data_cached(&mut context.pool()).await?;
90     let slur_regex = &local_site_opt_to_slur_regex(&local_site_data.local_site);
91
92     check_slurs(&self.preferred_username, slur_regex)?;
93     check_slurs_opt(&self.name, slur_regex)?;
94     let description = read_from_string_or_source_opt(&self.summary, &None, &self.source);
95     check_slurs_opt(&description, slur_regex)?;
96     Ok(())
97   }
98
99   pub(crate) fn into_insert_form(self, instance_id: InstanceId) -> CommunityInsertForm {
100     let name = sanitize_html(&self.preferred_username);
101     let title = sanitize_html(&self.name.unwrap_or(self.preferred_username));
102     let description = read_from_string_or_source_opt(&self.summary, &None, &self.source);
103     let description = sanitize_html_opt(&description);
104
105     CommunityInsertForm {
106       name,
107       title,
108       description,
109       removed: None,
110       published: self.published.map(|u| u.naive_local()),
111       updated: self.updated.map(|u| u.naive_local()),
112       deleted: Some(false),
113       nsfw: Some(self.sensitive.unwrap_or(false)),
114       actor_id: Some(self.id.into()),
115       local: Some(false),
116       private_key: None,
117       hidden: None,
118       public_key: self.public_key.public_key_pem,
119       last_refreshed_at: Some(naive_now()),
120       icon: self.icon.map(|i| i.url.into()),
121       banner: self.image.map(|i| i.url.into()),
122       followers_url: Some(self.followers.into()),
123       inbox_url: Some(self.inbox.into()),
124       shared_inbox_url: self.endpoints.map(|e| e.shared_inbox.into()),
125       moderators_url: self.attributed_to.map(Into::into),
126       posting_restricted_to_mods: self.posting_restricted_to_mods,
127       instance_id,
128       featured_url: self.featured.map(Into::into),
129     }
130   }
131
132   pub(crate) fn into_update_form(self) -> CommunityUpdateForm {
133     CommunityUpdateForm {
134       title: Some(self.name.unwrap_or(self.preferred_username)),
135       description: Some(read_from_string_or_source_opt(
136         &self.summary,
137         &None,
138         &self.source,
139       )),
140       removed: None,
141       published: self.published.map(|u| u.naive_local()),
142       updated: Some(self.updated.map(|u| u.naive_local())),
143       deleted: None,
144       nsfw: Some(self.sensitive.unwrap_or(false)),
145       actor_id: Some(self.id.into()),
146       local: None,
147       private_key: None,
148       hidden: None,
149       public_key: Some(self.public_key.public_key_pem),
150       last_refreshed_at: Some(naive_now()),
151       icon: Some(self.icon.map(|i| i.url.into())),
152       banner: Some(self.image.map(|i| i.url.into())),
153       followers_url: Some(self.followers.into()),
154       inbox_url: Some(self.inbox.into()),
155       shared_inbox_url: Some(self.endpoints.map(|e| e.shared_inbox.into())),
156       moderators_url: self.attributed_to.map(Into::into),
157       posting_restricted_to_mods: self.posting_restricted_to_mods,
158       featured_url: self.featured.map(Into::into),
159     }
160   }
161 }