feat: publish sanitized custom.97 source

This commit is contained in:
cneicy committed 2026-10-27 20:43:39 +08:00
1 parent 8e6ed0317b
commit 86c0276156
1022 files changed
+69903 -19207

No files matched your search

+80 -60
View File
@@ -1,7 +1,6 @@
package console_setting
import (
"fmt"
"net/url"
"regexp"
"sort"
@@ -24,10 +23,10 @@ var (
slugRegex = regexp.MustCompile(`^[a-zA-Z0-9_-]+$`)
)
func parseJSONArray(jsonStr string, typeName string) ([]map[string]interface{}, error) {
var list []map[string]interface{}
func parseJSONArray(jsonStr string, formatErrorKey string) ([]map[string]any, error) {
var list []map[string]any
if err := common.UnmarshalJsonStr(jsonStr, &list); err != nil {
return nil, fmt.Errorf("%s格式错误:%s", typeName, err.Error())
return nil, common.NewMessage(formatErrorKey, map[string]any{"error": err.Error()})
}
return list, nil
}
@@ -36,31 +35,52 @@ func exceedsMaxCharacters(s string, max int) bool {
return len(utf16.Encode([]rune(s))) > max
}
func validateURL(urlStr string, index int, itemType string) error {
// itemMessages are the keys of the URL and content checks shared by the
// API info and Uptime Kuma group lists.
type itemMessages struct {
invalidURL string
unparsableURL string
unsafeContent string
}
var (
apiInfoMessages = itemMessages{
invalidURL: "API info #{{index}} has an invalid URL format",
unparsableURL: "API info #{{index}} has a URL that cannot be parsed: {{error}}",
unsafeContent: "API info #{{index}} contains disallowed content",
}
groupMessages = itemMessages{
invalidURL: "Group #{{index}} has an invalid URL format",
unparsableURL: "Group #{{index}} has a URL that cannot be parsed: {{error}}",
unsafeContent: "Group #{{index}} contains disallowed content",
}
)
func validateURL(urlStr string, index int, messages itemMessages) error {
if !urlRegex.MatchString(urlStr) {
return fmt.Errorf("第%d个%s的URL格式不正确", index, itemType)
return common.NewMessage(messages.invalidURL, map[string]any{"index": index})
}
if _, err := url.Parse(urlStr); err != nil {
return fmt.Errorf("第%d个%s的URL无法解析:%s", index, itemType, err.Error())
return common.NewMessage(messages.unparsableURL, map[string]any{"index": index, "error": err.Error()})
}
return nil
}
func checkDangerousContent(content string, index int, itemType string) error {
func checkDangerousContent(content string, index int, messages itemMessages) error {
lower := strings.ToLower(content)
for _, d := range dangerousChars {
if strings.Contains(lower, d) {
return fmt.Errorf("第%d个%s包含不允许的内容", index, itemType)
return common.NewMessage(messages.unsafeContent, map[string]any{"index": index})
}
}
return nil
}
func getJSONList(jsonStr string) []map[string]interface{} {
func getJSONList(jsonStr string) []map[string]any {
if jsonStr == "" {
return []map[string]interface{}{}
return []map[string]any{}
}
var list []map[string]interface{}
var list []map[string]any
_ = common.UnmarshalJsonStr(jsonStr, &list)
return list
}
@@ -80,77 +100,77 @@ func ValidateConsoleSettings(settingsStr string, settingType string) error {
case "UptimeKumaGroups":
return validateUptimeKumaGroups(settingsStr)
default:
return fmt.Errorf("未知的设置类型:%s", settingType)
return common.NewMessage("Unknown setting type: {{type}}", map[string]any{"type": settingType})
}
}
func validateApiInfo(apiInfoStr string) error {
apiInfoList, err := parseJSONArray(apiInfoStr, "API信息")
apiInfoList, err := parseJSONArray(apiInfoStr, "Invalid API info format: {{error}}")
if err != nil {
return err
}
if len(apiInfoList) > 50 {
return fmt.Errorf("API信息数量不能超过50个")
return common.NewMessage("API info cannot exceed 50 entries")
}
for i, apiInfo := range apiInfoList {
urlStr, ok := apiInfo["url"].(string)
if !ok || urlStr == "" {
return fmt.Errorf("第%d个API信息缺少URL字段", i+1)
return common.NewMessage("API info #{{index}} is missing the URL field", map[string]any{"index": i + 1})
}
route, ok := apiInfo["route"].(string)
if !ok || route == "" {
return fmt.Errorf("第%d个API信息缺少线路描述字段", i+1)
return common.NewMessage("API info #{{index}} is missing the route description field", map[string]any{"index": i + 1})
}
description, ok := apiInfo["description"].(string)
if !ok || description == "" {
return fmt.Errorf("第%d个API信息缺少说明字段", i+1)
return common.NewMessage("API info #{{index}} is missing the description field", map[string]any{"index": i + 1})
}
color, ok := apiInfo["color"].(string)
if !ok || color == "" {
return fmt.Errorf("第%d个API信息缺少颜色字段", i+1)
return common.NewMessage("API info #{{index}} is missing the color field", map[string]any{"index": i + 1})
}
if err := validateURL(urlStr, i+1, "API信息"); err != nil {
if err := validateURL(urlStr, i+1, apiInfoMessages); err != nil {
return err
}
if exceedsMaxCharacters(urlStr, 500) {
return fmt.Errorf("第%d个API信息的URL长度不能超过500字符", i+1)
return common.NewMessage("API info #{{index}} URL cannot exceed 500 characters", map[string]any{"index": i + 1})
}
if exceedsMaxCharacters(route, 100) {
return fmt.Errorf("第%d个API信息的线路描述长度不能超过100字符", i+1)
return common.NewMessage("API info #{{index}} route description cannot exceed 100 characters", map[string]any{"index": i + 1})
}
if exceedsMaxCharacters(description, 200) {
return fmt.Errorf("第%d个API信息的说明长度不能超过200字符", i+1)
return common.NewMessage("API info #{{index}} description cannot exceed 200 characters", map[string]any{"index": i + 1})
}
if !validColors[color] {
return fmt.Errorf("第%d个API信息的颜色值不合法", i+1)
return common.NewMessage("API info #{{index}} has an invalid color value", map[string]any{"index": i + 1})
}
if err := checkDangerousContent(description, i+1, "API信息"); err != nil {
if err := checkDangerousContent(description, i+1, apiInfoMessages); err != nil {
return err
}
if err := checkDangerousContent(route, i+1, "API信息"); err != nil {
if err := checkDangerousContent(route, i+1, apiInfoMessages); err != nil {
return err
}
}
return nil
}
func GetApiInfo() []map[string]interface{} {
func GetApiInfo() []map[string]any {
return getJSONList(GetConsoleSetting().ApiInfo)
}
func validateAnnouncements(announcementsStr string) error {
list, err := parseJSONArray(announcementsStr, "系统公告")
list, err := parseJSONArray(announcementsStr, "Invalid announcements format: {{error}}")
if err != nil {
return err
}
if len(list) > 100 {
return fmt.Errorf("系统公告数量不能超过100个")
return common.NewMessage("Announcements cannot exceed 100 entries")
}
validTypes := map[string]bool{
"default": true, "ongoing": true, "success": true, "warning": true, "error": true,
@@ -158,32 +178,32 @@ func validateAnnouncements(announcementsStr string) error {
for i, ann := range list {
content, ok := ann["content"].(string)
if !ok || content == "" {
return fmt.Errorf("第%d个公告缺少内容字段", i+1)
return common.NewMessage("Announcement #{{index}} is missing the content field", map[string]any{"index": i + 1})
}
publishDateAny, exists := ann["publishDate"]
if !exists {
return fmt.Errorf("第%d个公告缺少发布日期字段", i+1)
return common.NewMessage("Announcement #{{index}} is missing the publish date field", map[string]any{"index": i + 1})
}
publishDateStr, ok := publishDateAny.(string)
if !ok || publishDateStr == "" {
return fmt.Errorf("第%d个公告的发布日期不能为空", i+1)
return common.NewMessage("Announcement #{{index}} publish date cannot be empty", map[string]any{"index": i + 1})
}
if _, err := time.Parse(time.RFC3339, publishDateStr); err != nil {
return fmt.Errorf("第%d个公告的发布日期格式错误", i+1)
return common.NewMessage("Announcement #{{index}} has an invalid publish date format", map[string]any{"index": i + 1})
}
if t, exists := ann["type"]; exists {
if typeStr, ok := t.(string); ok {
if !validTypes[typeStr] {
return fmt.Errorf("第%d个公告的类型值不合法", i+1)
return common.NewMessage("Announcement #{{index}} has an invalid type value", map[string]any{"index": i + 1})
}
}
}
if exceedsMaxCharacters(content, 500) {
return fmt.Errorf("第%d个公告的内容长度不能超过500字符", i+1)
return common.NewMessage("Announcement #{{index}} content cannot exceed 500 characters", map[string]any{"index": i + 1})
}
if extra, exists := ann["extra"]; exists {
if extraStr, ok := extra.(string); ok && exceedsMaxCharacters(extraStr, 100) {
return fmt.Errorf("第%d个公告的说明长度不能超过100字符", i+1)
return common.NewMessage("Announcement #{{index}} note cannot exceed 100 characters", map[string]any{"index": i + 1})
}
}
}
@@ -191,33 +211,33 @@ func validateAnnouncements(announcementsStr string) error {
}
func validateFAQ(faqStr string) error {
list, err := parseJSONArray(faqStr, "FAQ信息")
list, err := parseJSONArray(faqStr, "Invalid FAQ format: {{error}}")
if err != nil {
return err
}
if len(list) > 100 {
return fmt.Errorf("FAQ数量不能超过100个")
return common.NewMessage("FAQ cannot exceed 100 entries")
}
for i, faq := range list {
question, ok := faq["question"].(string)
if !ok || question == "" {
return fmt.Errorf("第%d个FAQ缺少问题字段", i+1)
return common.NewMessage("FAQ #{{index}} is missing the question field", map[string]any{"index": i + 1})
}
answer, ok := faq["answer"].(string)
if !ok || answer == "" {
return fmt.Errorf("第%d个FAQ缺少答案字段", i+1)
return common.NewMessage("FAQ #{{index}} is missing the answer field", map[string]any{"index": i + 1})
}
if exceedsMaxCharacters(question, 200) {
return fmt.Errorf("第%d个FAQ的问题长度不能超过200字符", i+1)
return common.NewMessage("FAQ #{{index}} question cannot exceed 200 characters", map[string]any{"index": i + 1})
}
if exceedsMaxCharacters(answer, 1000) {
return fmt.Errorf("第%d个FAQ的答案长度不能超过1000字符", i+1)
return common.NewMessage("FAQ #{{index}} answer cannot exceed 1000 characters", map[string]any{"index": i + 1})
}
}
return nil
}
func getPublishTime(item map[string]interface{}) time.Time {
func getPublishTime(item map[string]any) time.Time {
if v, ok := item["publishDate"]; ok {
if s, ok2 := v.(string); ok2 {
if t, err := time.Parse(time.RFC3339, s); err == nil {
@@ -228,7 +248,7 @@ func getPublishTime(item map[string]interface{}) time.Time {
return time.Time{}
}
func GetAnnouncements() []map[string]interface{} {
func GetAnnouncements() []map[string]any {
list := getJSONList(GetConsoleSetting().Announcements)
sort.SliceStable(list, func(i, j int) bool {
return getPublishTime(list[i]).After(getPublishTime(list[j]))
@@ -236,18 +256,18 @@ func GetAnnouncements() []map[string]interface{} {
return list
}
func GetFAQ() []map[string]interface{} {
func GetFAQ() []map[string]any {
return getJSONList(GetConsoleSetting().FAQ)
}
func validateUptimeKumaGroups(groupsStr string) error {
groups, err := parseJSONArray(groupsStr, "Uptime Kuma分组配置")
groups, err := parseJSONArray(groupsStr, "Invalid Uptime Kuma group settings format: {{error}}")
if err != nil {
return err
}
if len(groups) > 20 {
return fmt.Errorf("Uptime Kuma分组数量不能超过20个")
return common.NewMessage("Uptime Kuma groups cannot exceed 20 entries")
}
nameSet := make(map[string]bool)
@@ -255,56 +275,56 @@ func validateUptimeKumaGroups(groupsStr string) error {
for i, group := range groups {
categoryName, ok := group["categoryName"].(string)
if !ok || categoryName == "" {
return fmt.Errorf("第%d个分组缺少分类名称字段", i+1)
return common.NewMessage("Group #{{index}} is missing the category name field", map[string]any{"index": i + 1})
}
if nameSet[categoryName] {
return fmt.Errorf("第%d个分组的分类名称与其他分组重复", i+1)
return common.NewMessage("Group #{{index}} category name duplicates another group", map[string]any{"index": i + 1})
}
nameSet[categoryName] = true
urlStr, ok := group["url"].(string)
if !ok || urlStr == "" {
return fmt.Errorf("第%d个分组缺少URL字段", i+1)
return common.NewMessage("Group #{{index}} is missing the URL field", map[string]any{"index": i + 1})
}
slug, ok := group["slug"].(string)
if !ok || slug == "" {
return fmt.Errorf("第%d个分组缺少Slug字段", i+1)
return common.NewMessage("Group #{{index}} is missing the slug field", map[string]any{"index": i + 1})
}
description, ok := group["description"].(string)
if !ok {
description = ""
}
if err := validateURL(urlStr, i+1, "分组"); err != nil {
if err := validateURL(urlStr, i+1, groupMessages); err != nil {
return err
}
if exceedsMaxCharacters(categoryName, 50) {
return fmt.Errorf("第%d个分组的分类名称长度不能超过50字符", i+1)
return common.NewMessage("Group #{{index}} category name cannot exceed 50 characters", map[string]any{"index": i + 1})
}
if exceedsMaxCharacters(urlStr, 500) {
return fmt.Errorf("第%d个分组的URL长度不能超过500字符", i+1)
return common.NewMessage("Group #{{index}} URL cannot exceed 500 characters", map[string]any{"index": i + 1})
}
if exceedsMaxCharacters(slug, 100) {
return fmt.Errorf("第%d个分组的Slug长度不能超过100字符", i+1)
return common.NewMessage("Group #{{index}} slug cannot exceed 100 characters", map[string]any{"index": i + 1})
}
if exceedsMaxCharacters(description, 200) {
return fmt.Errorf("第%d个分组的描述长度不能超过200字符", i+1)
return common.NewMessage("Group #{{index}} description cannot exceed 200 characters", map[string]any{"index": i + 1})
}
if !slugRegex.MatchString(slug) {
return fmt.Errorf("第%d个分组的Slug只能包含字母、数字、下划线和连字符", i+1)
return common.NewMessage("Group #{{index}} slug can only contain letters, numbers, underscores and hyphens", map[string]any{"index": i + 1})
}
if err := checkDangerousContent(description, i+1, "分组"); err != nil {
if err := checkDangerousContent(description, i+1, groupMessages); err != nil {
return err
}
if err := checkDangerousContent(categoryName, i+1, "分组"); err != nil {
if err := checkDangerousContent(categoryName, i+1, groupMessages); err != nil {
return err
}
}
return nil
}
func GetUptimeKumaGroups() []map[string]interface{} {
func GetUptimeKumaGroups() []map[string]any {
return getJSONList(GetConsoleSetting().UptimeKumaGroups)
}