package panel import ( "net/http" c "github.com/Azareal/Gosora/common" p "github.com/Azareal/Gosora/common/phrases" ) // A blank list to fill out that parameter in Page for routes which don't use it var tList []interface{} var successJSONBytes = []byte(`{"success":1}`) // We're trying to reduce the amount of boilerplate in here, so I added these two functions, they might wind up circulating outside this file in the future func successRedirect(dest string, w http.ResponseWriter, r *http.Request, js bool) c.RouteError { if !js { http.Redirect(w, r, dest, http.StatusSeeOther) } else { w.Write(successJSONBytes) } return nil } // TODO: Prerender needs to handle dyntmpl templates better... func renderTemplate(tmplName string, w http.ResponseWriter, r *http.Request, h *c.Header, pi interface{}) c.RouteError { if !h.LooseCSP { if c.Config.SslSchema { w.Header().Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self';upgrade-insecure-requests") } else { w.Header().Set("Content-Security-Policy", "default-src 'self' 'unsafe-eval'; style-src 'self' 'unsafe-eval' 'unsafe-inline'; img-src * data: 'unsafe-eval' 'unsafe-inline'; connect-src * 'unsafe-eval' 'unsafe-inline'; frame-src 'self'") } } h.AddScript("global.js") if c.RunPreRenderHook("pre_render_"+tmplName, w, r, h.CurrentUser, pi) { return nil } // TODO: Prepend this with panel_? err := h.Theme.RunTmpl(tmplName, pi, w) if err != nil { return c.InternalError(err, w, r) } return nil } func buildBasePage(w http.ResponseWriter, r *http.Request, u *c.User, titlePhrase, zone string) (*c.BasePanelPage, c.RouteError) { h, stats, ferr := c.PanelUserCheck(w, r, u) if ferr != nil { return nil, ferr } h.Title = p.GetTitlePhrase("panel_" + titlePhrase) return &c.BasePanelPage{h, stats, zone, c.ReportForumID}, nil }