Files
forge/web_src/js/features/comp/EditorUpload.ts
zeekayandHanzo Dev 76aaa4ded8 rebrand: purge upstream branding that still reached users and operators
Audited against the live site, not just the source. git.hanzo.ai renders a
clean DOM already, so what was left was the surface that source greps miss
and live headers show.

The one leak visibly served on every request:

  set-cookie: gitea_incredible=

The remember-me cookie default was never rebranded. Renamed to
hanzo_git_remember; existing remember-me sessions are invalidated once.

The container was branding the site title upstream. Both entrypoints wrote
APP_NAME="Gitea: Git with a cup of tea" into app.ini, overriding the
already-correct Go default. Removed the shell default entirely so the value
lives in exactly one place, setting.AppName; ini MustString fills an empty
key with the default.

Half-finished earlier passes, now finished: the iframe query params were
already hanzo-*, but the postMessage payload keys and the window global
were not; the settings page told users to sign with "-n gitea" while the
verifier is the only thing that has to agree with it, so the namespace is
now one exported constant rendered into the command.

Also: local storage prefix, the fetch-action request header (made
vendor-free per our header convention, both ends are ours), install-form
database prefill, and the shipped example config, which additionally
documented $GITEA_WORK_DIR and $GITEA_CUSTOM -- env vars this fork renamed
to GIT_* long ago -- and a COOKIE_USERNAME key the code no longer reads.

Deleted docker/manifest*.tmpl: dead Drone-era templates publishing to
gitea/gitea on Docker Hub, referenced by nothing. Our docker dry-run was
also pulling build cache from ghcr.io/go-gitea/gitea.

Deliberately left, with reasons:
- "The Gitea Authors" copyright headers (2938) and upstream PR/issue links
  (278). Attribution and provenance; removing them would be wrong.
- /data/gitea on-disk layout. Renaming it is a data migration that orphans
  every existing install's db, sessions, avatars and attachments.
- The "gitea" webhook type and migration source. Wire and DB values, and
  the migration source correctly names a third party we import from, the
  same way github and gitlab do. Display name already reads Hanzo Git.
- X-Gitea-OTP, X-Gitea-Object-Type and the X-Gitea-* webhook delivery
  headers. External client contracts on a live host; renaming them belongs
  in its own change, not a branding sweep.
- gitea-azuread__a and sodipodi:docname in web_src/svg. Verified these never
  reach the DOM: svgo cleanupIds rewrites the ids and removeEditorsNSData
  strips the editor metadata before the asset is written.

Co-authored-by: Hanzo Dev <[email protected]>
2026-07-26 11:30:33 -07:00

169 lines
6.0 KiB
TypeScript

import {imageInfo} from '../../utils/image.ts';
import {replaceTextareaSelection, triggerEditorContentChanged} from './EditorMarkdown.ts';
import {
DropzoneCustomEventRemovedFile,
DropzoneCustomEventUploadDone,
generateMarkdownLinkForAttachment,
} from '../dropzone.ts';
import {subscribe} from '@github/paste-markdown';
import type CodeMirror from 'codemirror';
import type EasyMDE from 'easymde';
import type Dropzone from '@deltablot/dropzone';
let uploadIdCounter = 0;
export const EventUploadStateChanged = 'ce-upload-state-changed';
export function triggerUploadStateChanged(target: HTMLElement) {
target.dispatchEvent(new CustomEvent(EventUploadStateChanged, {bubbles: true}));
}
function uploadFile(dropzoneEl: HTMLElement, file: File) {
return new Promise((resolve) => {
const curUploadId = uploadIdCounter++;
(file as any)._hanzoUploadId = curUploadId;
const dropzoneInst = dropzoneEl.dropzone;
const onUploadDone = ({file}: {file: any}) => {
if (file._hanzoUploadId === curUploadId) {
dropzoneInst.off(DropzoneCustomEventUploadDone, onUploadDone);
resolve(file);
}
};
dropzoneInst.on(DropzoneCustomEventUploadDone, onUploadDone);
// FIXME: this is not entirely correct because `file` does not satisfy DropzoneFile (we have abused the Dropzone for long time)
dropzoneInst.addFile(file as Dropzone.DropzoneFile);
});
}
class TextareaEditor {
editor: HTMLTextAreaElement;
constructor(editor: HTMLTextAreaElement) {
this.editor = editor;
}
insertPlaceholder(value: string) {
replaceTextareaSelection(this.editor, value);
}
replacePlaceholder(oldVal: string, newVal: string) {
const editor = this.editor;
const startPos = editor.selectionStart;
const endPos = editor.selectionEnd;
if (editor.value.substring(startPos, endPos) === oldVal) {
editor.value = editor.value.substring(0, startPos) + newVal + editor.value.substring(endPos);
editor.selectionEnd = startPos + newVal.length;
} else {
editor.value = editor.value.replace(oldVal, newVal);
editor.selectionEnd -= oldVal.length;
editor.selectionEnd += newVal.length;
}
editor.selectionStart = editor.selectionEnd;
editor.focus();
triggerEditorContentChanged(editor);
}
}
class CodeMirrorEditor {
editor: CodeMirror.EditorFromTextArea;
constructor(editor: CodeMirror.EditorFromTextArea) {
this.editor = editor;
}
insertPlaceholder(value: string) {
const editor = this.editor;
const startPoint = editor.getCursor('start');
const endPoint = editor.getCursor('end');
editor.replaceSelection(value);
endPoint.ch = startPoint.ch + value.length;
editor.setSelection(startPoint, endPoint);
editor.focus();
triggerEditorContentChanged(editor.getTextArea());
}
replacePlaceholder(oldVal: string, newVal: string) {
const editor = this.editor;
const endPoint = editor.getCursor('end');
if (editor.getSelection() === oldVal) {
editor.replaceSelection(newVal);
} else {
editor.setValue(editor.getValue().replace(oldVal, newVal));
}
endPoint.ch -= oldVal.length;
endPoint.ch += newVal.length;
editor.setSelection(endPoint, endPoint);
editor.focus();
triggerEditorContentChanged(editor.getTextArea());
}
}
async function handleUploadFiles(editor: CodeMirrorEditor | TextareaEditor, dropzoneEl: HTMLElement, files: Array<File> | FileList, e: Event) {
e.preventDefault();
for (const file of files) {
const name = file.name.slice(0, file.name.lastIndexOf('.'));
const {width, dppx} = await imageInfo(file);
const placeholder = `[${name}](uploading ...)`;
editor.insertPlaceholder(placeholder);
await uploadFile(dropzoneEl, file); // the "file" will get its "uuid" during the upload
editor.replacePlaceholder(placeholder, generateMarkdownLinkForAttachment(file, {width, dppx}));
}
}
export function removeAttachmentLinksFromMarkdown(text: string, fileUuid: string) {
text = text.replace(new RegExp(`!?\\[([^\\]]+)\\]\\(/?attachments/${fileUuid}\\)`, 'g'), '');
text = text.replace(new RegExp(`[<]img[^>]+src="/?attachments/${fileUuid}"[^>]*>`, 'g'), '');
return text;
}
function getPastedImages(e: ClipboardEvent) {
const images: Array<File> = [];
for (const item of e.clipboardData?.items ?? []) {
if (item.type?.startsWith('image/')) {
const file = item.getAsFile();
if (file) {
images.push(file);
}
}
}
return images;
}
export function initEasyMDEPaste(easyMDE: EasyMDE, dropzoneEl: HTMLElement) {
const editor = new CodeMirrorEditor(easyMDE.codemirror as any);
easyMDE.codemirror.on('paste', (_, e) => {
const images = getPastedImages(e);
if (!images.length) return;
handleUploadFiles(editor, dropzoneEl, images, e);
});
easyMDE.codemirror.on('drop', (_, e) => {
if (!e.dataTransfer?.files.length) return;
handleUploadFiles(editor, dropzoneEl, e.dataTransfer.files, e);
});
dropzoneEl.dropzone.on(DropzoneCustomEventRemovedFile, ({fileUuid}) => {
const oldText = easyMDE.codemirror.getValue();
const newText = removeAttachmentLinksFromMarkdown(oldText, fileUuid);
if (oldText !== newText) easyMDE.codemirror.setValue(newText);
});
}
export function initTextareaEvents(textarea: HTMLTextAreaElement, dropzoneEl: HTMLElement | null) {
subscribe(textarea); // enable paste features
textarea.addEventListener('paste', (e: ClipboardEvent) => {
const images = getPastedImages(e);
if (images.length && dropzoneEl) {
handleUploadFiles(new TextareaEditor(textarea), dropzoneEl, images, e);
}
});
textarea.addEventListener('drop', (e: DragEvent) => {
if (!e.dataTransfer?.files.length) return;
if (!dropzoneEl) return;
handleUploadFiles(new TextareaEditor(textarea), dropzoneEl, e.dataTransfer.files, e);
});
dropzoneEl?.dropzone.on(DropzoneCustomEventRemovedFile, ({fileUuid}: {fileUuid: string}) => {
const newText = removeAttachmentLinksFromMarkdown(textarea.value, fileUuid);
if (textarea.value !== newText) textarea.value = newText;
});
}