9a45d1e2a9
This commit upgrades dependencies that are more or less trivial to update, e.g. because they didn't have major version bumps or simply didn't break anything. There are some dependencies which have not been upgraded since this would have required larger refactorings. This includes especially the markdown-it ecosystem and the webpack ecosystem. The largest refactorings in this commit come from the bump of socket.io v2 to v4 which changed the handling of the connected socket list for instance. This commit further removes some outdated and/or unnecessary dependencies. This includes the String.js library which is unmaintained for 9 years and has some CVEs. We mainly used this library for their escapeHTML and unescapeHTML methods. This can be done using native DOM APIs nowadays, which is also considered more safe since it is the same logic that the browser itself uses. Since we target Node 18 and above, we can also rely on the built-in fetch function instead of the node-fetch package. The current version of Chance.js includes a method for generating a random color now too, so we don't need the package randomcolor anymore. Signed-off-by: Erik Michelson <github@erik.michelson.eu>
51 lines
1.3 KiB
JavaScript
51 lines
1.3 KiB
JavaScript
import base64url from 'base64url'
|
|
|
|
const uuidRegex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i
|
|
|
|
export function checkNoteIdValid (id) {
|
|
const result = id.match(uuidRegex)
|
|
if (result && result.length === 1) {
|
|
return true
|
|
} else {
|
|
return false
|
|
}
|
|
}
|
|
|
|
export function encodeNoteId (id) {
|
|
// remove dashes in UUID and encode in url-safe base64
|
|
const str = id.replace(/-/g, '')
|
|
const hexStr = Buffer.from(str, 'hex')
|
|
return base64url.encode(hexStr)
|
|
}
|
|
|
|
export function decodeNoteId (encodedId) {
|
|
// decode from url-safe base64
|
|
const id = base64url.toBuffer(encodedId).toString('hex')
|
|
// add dashes between the UUID string parts
|
|
const idParts = []
|
|
idParts.push(id.substr(0, 8))
|
|
idParts.push(id.substr(8, 4))
|
|
idParts.push(id.substr(12, 4))
|
|
idParts.push(id.substr(16, 4))
|
|
idParts.push(id.substr(20, 12))
|
|
return idParts.join('-')
|
|
}
|
|
|
|
// use browser's DOM APIs for escaping and unescaping HTML
|
|
export function escapeHtml (unsafe) {
|
|
if (!unsafe) {
|
|
return ''
|
|
}
|
|
const tempDiv = document.createElement('div')
|
|
tempDiv.appendChild(document.createTextNode(String(unsafe)))
|
|
return tempDiv.innerHTML
|
|
}
|
|
|
|
export function unescapeHtml (escapedHtml) {
|
|
if (!escapedHtml) {
|
|
return ''
|
|
}
|
|
const doc = new DOMParser().parseFromString(escapedHtml, 'text/html')
|
|
return doc.documentElement.textContent || ''
|
|
}
|