vichan/templates/thread.html

<!doctype html>
<html>
<head>
	<meta charset="utf-8">

        <script type="text/javascript">
          var active_page = "thread"
	    , board_name = "{{ board.uri }}"
	    , thread_id = "{{ thread.id }}";
	</script>

	{% include 'header.html' %}

	{% set meta_subject %}{% if config.thread_subject_in_title and thread.subject %}{{ thread.subject|e }}{% else %}{{ thread.body_nomarkup|remove_modifiers[:256]|e }}{% endif %}{% endset %}

	<meta name="description" content="{{ board.url }} - {{ board.title|e }} - {{ meta_subject }}" />
	<meta name="twitter:card" value="summary">
	<meta name="twitter:title" content="{{ meta_subject }}" />
	<meta name="twitter:description" content="{{ thread.body_nomarkup|e }}" />
	{% if thread.files.0.thumb %}<meta name="twitter:image" content="{{ config.domain }}/{{ board.uri }}/{{ config.dir.thumb }}{{ thread.files.0.thumb }}" />{% endif %}
	<meta property="og:title" content="{{ meta_subject }}" />
	<meta property="og:type" content="article" />
	<meta property="og:url" content="{{ config.domain }}/{{ board.uri }}/{{ config.dir.res }}{{ thread.id }}.html" />
	{% if thread.files.0.thumb %}<meta property="og:image" content="{{ config.domain }}/{{ board.uri }}/{{ config.dir.thumb }}{{ thread.files.0.thumb }}" />{% endif %}
	<meta property="og:description" content="{{ thread.body_nomarkup|remove_modifiers|e }}" />

	<title>{{ board.url }} - {{ meta_subject }}</title>
</head>
<body class="8chan vichan {% if mod %}is-moderator{% else %}is-not-moderator{% endif %} active-thread" data-stylesheet="{% if config.default_stylesheet.1 != '' %}{{ config.default_stylesheet.1 }}{% else %}default{% endif %}">
	{{ boardlist.top }}
	<a name="top"></a>
	{% if pm %}<div class="top_notice">You have <a href="?/PM/{{ pm.id }}">an unread PM</a>{% if pm.waiting > 0 %}, plus {{ pm.waiting }} more waiting{% endif %}.</div><hr />{% endif %}
	{% if config.url_banner %}<img class="board_image" src="{{ config.url_banner }}" {% if config.banner_width or config.banner_height %}style="{% if config.banner_width %}width:{{ config.banner_width }}px{% endif %};{% if config.banner_width %}height:{{ config.banner_height }}px{% endif %}" {% endif %}alt="" />{% endif %}
	<header>
		<h1>{{ board.url }} - {{ board.title|e }}</h1>
		<div class="subtitle">
			{% if board.subtitle %}
				{% if config.allow_subtitle_html %}
					{{ board.subtitle }}
				{% else %}
					{{ board.subtitle|e }}
				{% endif %}
			{% endif %}
			{% if mod %}<p><a href="?/">{% trans %}Return to dashboard{% endtrans %}</a></p>{% endif %}
		</div>
	</header>

	{% include 'attention_bar.html' %}

	<div class="banner">{% trans %}Posting mode: Reply{% endtrans %} <a class="unimportant" href="{{ return }}">[{% trans %}Return{% endtrans %}]</a> <a class="unimportant" href="#bottom">[{% trans %}Go to bottom {% endtrans %}]</a></div>

	{{ config.ad.top }}

	{% include 'post_form.html' %}

	{% if config.global_message %}<hr /><div class="blotter">{{ config.global_message }}</div>{% endif %}
	<hr />
	<form name="postcontrols" action="{{ config.post_url }}" method="post">
		<input type="hidden" name="board" value="{{ board.uri }}" />
		{% if mod %}<input type="hidden" name="mod" value="1" />{% endif %}
		
		{{ body }}
		
		<div id="thread-interactions">
			<span id="thread-links">
				<a id="thread-return" href="{{ return }}">[{% trans %}Return{% endtrans %}]</a>
				<a id="thread-top" href="#top">[{% trans %}Go to top{% endtrans %}]</a>
                		{% if config.catalog_link %}
					<a id="thread-catalog" href="{{ config.root }}{% if mod %}{{ config.file_mod }}?/{% endif %}{{ board.dir }}{{ config.catalog_link }}">{% trans %}Catalog{% endtrans %}</a>
		                {% endif %}
			</span>
			
			<span id="thread-quick-reply">
				<a id="link-quick-reply" href="#">[{% trans %}Post a Reply{% endtrans %}]</a>
			</span>
			
			{% include 'report_delete.html' %}
		</div>
		
		<div class="clearfix"></div>
	</form>
	
	<a name="bottom"></a>
	{{ boardlist.bottom }}

	{{ config.ad.bottom }}

	{% include 'footer.html' %}
	
	<script type="text/javascript">{% verbatim %}
		ready();
	{% endverbatim %}</script>
</body>
</html>
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`<!doctype html>`
			`<html>`
			`<head>`
			`<meta charset="utf-8">`
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard Conflicts: inc/config.php inc/display.php inc/functions.php inc/image.php js/expand.js js/hide-threads.js js/local-time.js js/smartphone-spoiler.js templates/header.html templates/index.html templates/main.js templates/page.html templates/post_reply.html templates/post_thread.html templates/thread.html 2013-07-31 20:54:20 +02:00
			`<script type="text/javascript">`
main.js: a bit more sane code 2016-05-05 14:38:24 +02:00			`var active_page = "thread"`
			`, board_name = "{{ board.uri }}"`
			`, thread_id = "{{ thread.id }}";`
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard Conflicts: inc/config.php inc/display.php inc/functions.php inc/image.php js/expand.js js/hide-threads.js js/local-time.js js/smartphone-spoiler.js templates/header.html templates/index.html templates/main.js templates/page.html templates/post_reply.html templates/post_thread.html templates/thread.html 2013-07-31 20:54:20 +02:00			`</script>`

			`{% include 'header.html' %}`
OpenGraph information in thread pages https://en.wikipedia.org/wiki/Facebook_Platform#Open_Graph_protocol 2015-02-17 01:31:15 +01:00
Fixed `thread.html` template (#380) * Update functions.php ` $_SERVER['REMOTE_ADDR']` was hardcoded in ban lookup instead of `$ip` variable * Fix information leak in thread.html Sensitive information can be leaked due to inadequate/absent escaping. Line 14 is truncating before removing tags, this can cause some tags to be cut and therefore not be removed by the `remove_` functions. Line 22 is just leaking it all, not removing anything. * Fixed thread template `remove_markup` is not available on vichan, arguably it makes things better but it's out of scope for this CHANGE, removing modifiers is enough to stop the info leak consider adding it again after pulling: fallenPineapple@a5b3336 also moving truncation before escaping for extra safety 2020-08-15 16:19:47 +02:00			`{% set meta_subject %}{% if config.thread_subject_in_title and thread.subject %}{{ thread.subject\|e }}{% else %}{{ thread.body_nomarkup\|remove_modifiers[:256]\|e }}{% endif %}{% endset %}`
OpenGraph information in thread pages https://en.wikipedia.org/wiki/Facebook_Platform#Open_Graph_protocol 2015-02-17 01:31:15 +01:00
debrand 8chan; btw. the previous commit was [SECURITY] i think? 2016-05-06 12:23:18 +02:00			`<meta name="description" content="{{ board.url }} - {{ board.title\|e }} - {{ meta_subject }}" />`
OpenGraph information in thread pages https://en.wikipedia.org/wiki/Facebook_Platform#Open_Graph_protocol 2015-02-17 01:31:15 +01:00			`<meta name="twitter:card" value="summary">`
Improve social media cards 2021-11-12 06:50:47 +01:00			`<meta name="twitter:title" content="{{ meta_subject }}" />`
			`<meta name="twitter:description" content="{{ thread.body_nomarkup\|e }}" />`
			`{% if thread.files.0.thumb %}<meta name="twitter:image" content="{{ config.domain }}/{{ board.uri }}/{{ config.dir.thumb }}{{ thread.files.0.thumb }}" />{% endif %}`
OpenGraph information in thread pages https://en.wikipedia.org/wiki/Facebook_Platform#Open_Graph_protocol 2015-02-17 01:31:15 +01:00			`<meta property="og:title" content="{{ meta_subject }}" />`
			`<meta property="og:type" content="article" />`
debrand 8chan; btw. the previous commit was [SECURITY] i think? 2016-05-06 12:23:18 +02:00			`<meta property="og:url" content="{{ config.domain }}/{{ board.uri }}/{{ config.dir.res }}{{ thread.id }}.html" />`
			`{% if thread.files.0.thumb %}<meta property="og:image" content="{{ config.domain }}/{{ board.uri }}/{{ config.dir.thumb }}{{ thread.files.0.thumb }}" />{% endif %}`
Fixed `thread.html` template (#380) * Update functions.php ` $_SERVER['REMOTE_ADDR']` was hardcoded in ban lookup instead of `$ip` variable * Fix information leak in thread.html Sensitive information can be leaked due to inadequate/absent escaping. Line 14 is truncating before removing tags, this can cause some tags to be cut and therefore not be removed by the `remove_` functions. Line 22 is just leaking it all, not removing anything. * Fixed thread template `remove_markup` is not available on vichan, arguably it makes things better but it's out of scope for this CHANGE, removing modifiers is enough to stop the info leak consider adding it again after pulling: fallenPineapple@a5b3336 also moving truncation before escaping for extra safety 2020-08-15 16:19:47 +02:00			`<meta property="og:description" content="{{ thread.body_nomarkup\|remove_modifiers\|e }}" />`
OpenGraph information in thread pages https://en.wikipedia.org/wiki/Facebook_Platform#Open_Graph_protocol 2015-02-17 01:31:15 +01:00
			`<title>{{ board.url }} - {{ meta_subject }}</title>`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`</head>`
add active page classes to body; czaks: go to bottom @ thread: fixes 2015-09-25 17:17:05 +02:00			`<body class="8chan vichan {% if mod %}is-moderator{% else %}is-not-moderator{% endif %} active-thread" data-stylesheet="{% if config.default_stylesheet.1 != '' %}{{ config.default_stylesheet.1 }}{% else %}default{% endif %}">`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`{{ boardlist.top }}`
boardlist goes before #top 2016-05-06 15:09:25 +02:00			`<a name="top"></a>`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`{% if pm %}<div class="top_notice">You have <a href="?/PM/{{ pm.id }}">an unread PM</a>{% if pm.waiting > 0 %}, plus {{ pm.waiting }} more waiting{% endif %}.</div><hr />{% endif %}`
rename banner class to board_image in order to evade some adblock rules 2014-01-06 16:38:48 +01:00			`{% if config.url_banner %}<img class="board_image" src="{{ config.url_banner }}" {% if config.banner_width or config.banner_height %}style="{% if config.banner_width %}width:{{ config.banner_width }}px{% endif %};{% if config.banner_width %}height:{{ config.banner_height }}px{% endif %}" {% endif %}alt="" />{% endif %}`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`<header>`
			`<h1>{{ board.url }} - {{ board.title\|e }}</h1>`
			`<div class="subtitle">`
			`{% if board.subtitle %}`
Allow for HTML in the board subtitle 2013-08-08 20:58:44 +02:00			`{% if config.allow_subtitle_html %}`
			`{{ board.subtitle }}`
			`{% else %}`
			`{{ board.subtitle\|e }}`
			`{% endif %}`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`{% endif %}`
			`{% if mod %}<p><a href="?/">{% trans %}Return to dashboard{% endtrans %}</a></p>{% endif %}`
			`</div>`
			`</header>`
header abstraction: abstracted also in thread.html Conflicts: templates/page.html templates/thread.html 2013-06-15 06:22:13 +02:00
rename banner class to board_image in order to evade some adblock rules 2014-01-06 16:38:48 +01:00			`{% include 'attention_bar.html' %}`
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard Conflicts: inc/config.php inc/display.php inc/functions.php inc/image.php js/expand.js js/hide-threads.js js/local-time.js js/smartphone-spoiler.js templates/header.html templates/index.html templates/main.js templates/page.html templates/post_reply.html templates/post_thread.html templates/thread.html 2013-07-31 20:54:20 +02:00
add active page classes to body; czaks: go to bottom @ thread: fixes 2015-09-25 17:17:05 +02:00			`<div class="banner">{% trans %}Posting mode: Reply{% endtrans %} <a class="unimportant" href="{{ return }}">[{% trans %}Return{% endtrans %}]</a> <a class="unimportant" href="#bottom">[{% trans %}Go to bottom {% endtrans %}]</a></div>`
Merge branch 'master' of https://github.com/savetheinternet/Tinyboard Conflicts: templates/thread.html 2013-08-01 01:25:04 +02:00
Advertisements 2013-08-08 23:57:52 +02:00			`{{ config.ad.top }}`

i prefer for the top ads to be over the boardlist 2014-01-06 03:28:37 +01:00			`{% include 'post_form.html' %}`

Major config.php cleanup and a few minor misc fixes. 2013-08-03 02:52:58 +02:00			`{% if config.global_message %}<hr /><div class="blotter">{{ config.global_message }}</div>{% endif %}`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`<hr />`
			`<form name="postcontrols" action="{{ config.post_url }}" method="post">`
Also improved some CSS and HTML aspects of the thread layout. Signed-off-by: 8n-tech <8n-tech@users.noreply.github.com> 2015-04-17 20:39:50 +02:00			`<input type="hidden" name="board" value="{{ board.uri }}" />`
			`{% if mod %}<input type="hidden" name="mod" value="1" />{% endif %}`

			`{{ body }}`

			`<div id="thread-interactions">`
			`<span id="thread-links">`
			`<a id="thread-return" href="{{ return }}">[{% trans %}Return{% endtrans %}]</a>`
			`<a id="thread-top" href="#top">[{% trans %}Go to top{% endtrans %}]</a>`
synchronize catalog_link 2016-05-06 14:14:22 +02:00			`{% if config.catalog_link %}`
simple catalog support for moderators 2022-06-20 20:09:55 +02:00			`<a id="thread-catalog" href="{{ config.root }}{% if mod %}{{ config.file_mod }}?/{% endif %}{{ board.dir }}{{ config.catalog_link }}">{% trans %}Catalog{% endtrans %}</a>`
synchronize catalog_link 2016-05-06 14:14:22 +02:00			`{% endif %}`
Also improved some CSS and HTML aspects of the thread layout. Signed-off-by: 8n-tech <8n-tech@users.noreply.github.com> 2015-04-17 20:39:50 +02:00			`</span>`

			`<span id="thread-quick-reply">`
			`<a id="link-quick-reply" href="#">[{% trans %}Post a Reply{% endtrans %}]</a>`
			`</span>`

			`{% include 'report_delete.html' %}`
			`</div>`

			`<div class="clearfix"></div>`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`</form>`
add id to thread links 2014-10-02 17:12:15 +02:00
Fixed go to bottom link 2017-04-21 03:09:48 +02:00			`<a name="bottom"></a>`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`{{ boardlist.bottom }}`
Advertisements 2013-08-08 23:57:52 +02:00
			`{{ config.ad.bottom }}`

Update footer Remove duplicate code footer in all pages Updated the link to the project on github 2022-12-06 20:55:26 +01:00			`{% include 'footer.html' %}`

`{% (end)?raw %}` ⇒ `{% (end)?verbatim %}` ``` rg '\{%\sraw' -l \| xargs -I{} sed -i -e 's/{%\(\s\)raw/{%\1verbatim/g; s/endraw\(\s*\)%}/endverbatim\1%}/g' {} ``` Close vichan-devel/vichan#452. 2021-11-04 03:45:01 +01:00			`<script type="text/javascript">{% verbatim %}`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`ready();`
`{% (end)?raw %}` ⇒ `{% (end)?verbatim %}` ``` rg '\{%\sraw' -l \| xargs -I{} sed -i -e 's/{%\(\s\)raw/{%\1verbatim/g; s/endraw\(\s*\)%}/endverbatim\1%}/g' {} ``` Close vichan-devel/vichan#452. 2021-11-04 03:45:01 +01:00			`{% endverbatim %}</script>`
Convert to UNIX line endings 2013-07-31 10:28:26 +02:00			`</body>`
			`</html>`