// // Copyright (c) 2019 Ted Unangst // // Permission to use, copy, modify, and distribute this software for any // purpose with or without fee is hereby granted, provided that the above // copyright notice and this permission notice appear in all copies. // // THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES // WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF // MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR // ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES // WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN // ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF // OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. package main import ( "crypto/rand" "crypto/rsa" "crypto/sha512" "fmt" "html/template" "io" "log" "net/http" "os" "regexp" "strings" "sync" "golang.org/x/net/html" "humungus.tedunangst.com/r/webs/cache" "humungus.tedunangst.com/r/webs/htfilter" "humungus.tedunangst.com/r/webs/httpsig" "humungus.tedunangst.com/r/webs/templates" ) var allowedclasses = make(map[string]bool) func init() { allowedclasses["kw"] = true allowedclasses["bi"] = true allowedclasses["st"] = true allowedclasses["nm"] = true allowedclasses["tp"] = true allowedclasses["op"] = true allowedclasses["cm"] = true allowedclasses["al"] = true allowedclasses["dl"] = true } func reverbolate(userid int64, honks []*Honk) { for _, h := range honks { h.What += "ed" if h.What == "tonked" { h.What = "honked back" h.Style = "subtle" } if !h.Public { h.Style += " limited" } translate(h, false) if h.Whofore == 2 || h.Whofore == 3 { h.URL = h.XID if h.What != "bonked" { h.Noise = re_memes.ReplaceAllString(h.Noise, "") h.Noise = mentionize(h.Noise) h.Noise = ontologize(h.Noise) } h.Username, h.Handle = handles(h.Honker) } else { _, h.Handle = handles(h.Honker) short := shortname(userid, h.Honker) if short != "" { h.Username = short } else { h.Username = h.Handle if len(h.Username) > 20 { h.Username = h.Username[:20] + ".." } } if h.URL == "" { h.URL = h.XID } } if h.Oonker != "" { _, h.Oondle = handles(h.Oonker) } h.Precis = demoji(h.Precis) h.Noise = demoji(h.Noise) h.Open = "open" zap := make(map[string]bool) { var htf htfilter.Filter htf.Imager = replaceimgsand(zap, false) htf.SpanClasses = allowedclasses p, _ := htf.String(h.Precis) n, _ := htf.String(h.Noise) h.Precis = string(p) h.Noise = string(n) } if userid == -1 { if h.Precis != "" { h.Open = "" } } else { unsee(userid, h) if h.Open == "open" && h.Precis == "unspecified horror" { h.Precis = "" } } if len(h.Noise) > 6000 && h.Open == "open" { if h.Precis == "" { h.Precis = "really freaking long" } h.Open = "" } emuxifier := func(e string) string { for _, d := range h.Donks { if d.Name == e { zap[d.XID] = true if d.Local { return fmt.Sprintf(``, d.Name, d.XID) } } } return e } h.Precis = re_emus.ReplaceAllStringFunc(h.Precis, emuxifier) h.Noise = re_emus.ReplaceAllStringFunc(h.Noise, emuxifier) j := 0 for i := 0; i < len(h.Donks); i++ { if !zap[h.Donks[i].XID] { h.Donks[j] = h.Donks[i] j++ } } h.Donks = h.Donks[:j] h.HTPrecis = template.HTML(h.Precis) h.HTML = template.HTML(h.Noise) } } func replaceimgsand(zap map[string]bool, absolute bool) func(node *html.Node) string { return func(node *html.Node) string { src := htfilter.GetAttr(node, "src") alt := htfilter.GetAttr(node, "alt") //title := GetAttr(node, "title") if htfilter.HasClass(node, "Emoji") && alt != "" { return alt } d := finddonk(src) if d != nil { zap[d.XID] = true base := "" if absolute { base = "https://" + serverName } return string(templates.Sprintf(`%s`, alt, alt, base, d.XID)) } return string(templates.Sprintf(`<img alt="%s" src="%s">`, alt, src, src)) } } func inlineimgsfor(honk *Honk) func(node *html.Node) string { return func(node *html.Node) string { src := htfilter.GetAttr(node, "src") alt := htfilter.GetAttr(node, "alt") d := savedonk(src, "image", alt, "image", true) if d != nil { honk.Donks = append(honk.Donks, d) } log.Printf("inline img with src: %s", src) return "" } } func imaginate(honk *Honk) { var htf htfilter.Filter htf.Imager = inlineimgsfor(honk) htf.String(honk.Noise) } func translate(honk *Honk, redoimages bool) { if honk.Format == "html" { return } noise := honk.Noise if strings.HasPrefix(noise, "DZ:") { idx := strings.Index(noise, "\n") if idx == -1 { honk.Precis = noise noise = "" } else { honk.Precis = noise[:idx] noise = noise[idx+1:] } } honk.Precis = strings.TrimSpace(honk.Precis) noise = strings.TrimSpace(noise) noise = quickrename(noise, honk.UserID) noise = markitzero(noise) honk.Noise = noise honk.Onts = oneofakind(ontologies(honk.Noise)) if redoimages { zap := make(map[string]bool) { var htf htfilter.Filter htf.Imager = replaceimgsand(zap, true) htf.SpanClasses = allowedclasses p, _ := htf.String(honk.Precis) n, _ := htf.String(honk.Noise) honk.Precis = string(p) honk.Noise = string(n) honk.Noise = strings.Replace(honk.Noise, "%s`, html.EscapeString(where), html.EscapeString(who)) }) s = re_urltions.ReplaceAllStringFunc(s, func(m string) string { return fmt.Sprintf(`%s`, html.EscapeString(m[1:]), html.EscapeString(m)) }) return s } func ontologize(s string) string { s = re_hashes.ReplaceAllStringFunc(s, func(o string) string { if o[0] == '&' { return o } p := "" h := o if h[0] != '#' { p = h[:1] h = h[1:] } return fmt.Sprintf(`%s%s`, p, serverName, strings.ToLower(h[1:]), h) }) return s } var re_unurl = regexp.MustCompile("https://([^/]+).*/([^/]+)") var re_urlhost = regexp.MustCompile("https://([^/ ]+)") func originate(u string) string { m := re_urlhost.FindStringSubmatch(u) if len(m) > 1 { return m[1] } return "" } var allhandles = make(map[string]string) var handlelock sync.Mutex // handle, handle@host func handles(xid string) (string, string) { if xid == "" { return "", "" } handlelock.Lock() handle := allhandles[xid] handlelock.Unlock() if handle == "" { handle = findhandle(xid) handlelock.Lock() allhandles[xid] = handle handlelock.Unlock() } if handle == xid { return xid, xid } return handle, handle + "@" + originate(xid) } func findhandle(xid string) string { row := stmtGetXonker.QueryRow(xid, "handle") var handle string err := row.Scan(&handle) if err != nil { info, _ := investigate(xid) if info == nil { m := re_unurl.FindStringSubmatch(xid) if len(m) > 2 { handle = m[2] } else { handle = xid } } else { handle = info.Name } _, err = stmtSaveXonker.Exec(xid, handle, "handle") if err != nil { log.Printf("error saving handle: %s", err) } } return handle } var handleprelock sync.Mutex func prehandle(xid string) { handleprelock.Lock() defer handleprelock.Unlock() handles(xid) } func prepend(s string, x []string) []string { return append([]string{s}, x...) } // pleroma leaks followers addressed posts to followers func butnottooloud(aud []string) { for i, a := range aud { if strings.HasSuffix(a, "/followers") { aud[i] = "" } } } func keepitquiet(aud []string) bool { for _, a := range aud { if a == thewholeworld { return false } } return true } func firstclass(honk *Honk) bool { return honk.Audience[0] == thewholeworld } func oneofakind(a []string) []string { seen := make(map[string]bool) seen[""] = true j := 0 for _, s := range a { if !seen[s] { seen[s] = true a[j] = s j++ } } return a[:j] } var ziggies = cache.New(cache.Options{Filler: func(userid int64) (*KeyInfo, bool) { var user *WhatAbout ok := somenumberedusers.Get(userid, &user) if !ok { return nil, false } ki := new(KeyInfo) ki.keyname = user.URL + "#key" ki.seckey = user.SecKey return ki, true }}) func ziggy(userid int64) *KeyInfo { var ki *KeyInfo ziggies.Get(userid, &ki) return ki } var zaggies = make(map[string]*rsa.PublicKey) var zaggylock sync.Mutex func zaggy(keyname string) (key *rsa.PublicKey) { zaggylock.Lock() key = zaggies[keyname] zaggylock.Unlock() if key != nil { return } row := stmtGetXonker.QueryRow(keyname, "pubkey") var data string err := row.Scan(&data) if err != nil { log.Printf("hitting the webs for missing pubkey: %s", keyname) j, err := GetJunk(keyname) if err != nil { log.Printf("error getting %s pubkey: %s", keyname, err) return } keyobj, ok := j.GetMap("publicKey") if ok { j = keyobj } data, ok = j.GetString("publicKeyPem") if !ok { log.Printf("error finding %s pubkey", keyname) return } _, ok = j.GetString("owner") if !ok { log.Printf("error finding %s pubkey owner", keyname) return } _, key, err = httpsig.DecodeKey(data) if err != nil { log.Printf("error decoding %s pubkey: %s", keyname, err) return } _, err = stmtSaveXonker.Exec(keyname, data, "pubkey") if err != nil { log.Printf("error saving key: %s", err) } } else { _, key, err = httpsig.DecodeKey(data) if err != nil { log.Printf("error decoding %s pubkey: %s", keyname, err) return } } zaggylock.Lock() zaggies[keyname] = key zaggylock.Unlock() return } func makeitworksomehowwithoutregardforkeycontinuity(keyname string, r *http.Request, payload []byte) (string, error) { _, err := stmtDeleteXonker.Exec(keyname, "pubkey") if err != nil { log.Printf("error deleting key: %s", err) } zaggylock.Lock() delete(zaggies, keyname) zaggylock.Unlock() return httpsig.VerifyRequest(r, payload, zaggy) } func keymatch(keyname string, actor string) string { hash := strings.IndexByte(keyname, '#') if hash == -1 { hash = len(keyname) } owner := keyname[0:hash] if owner == actor { return originate(actor) } return "" }