+ Snippet:
+
+
+ | Filter |
+ Source |
+ Rendered |
+
+
+ | linky filter |
+
+ <div ng-bind-html="snippet | linky">
</div>
+ |
+
+
+ |
+
+
+ | linky target |
+
+ <div ng-bind-html="snippetWithSingleURL | linky:'_blank'">
</div>
+ |
+
+
+ |
+
+
+ | linky custom attributes |
+
+ <div ng-bind-html="snippetWithSingleURL | linky:'_self':{rel: 'nofollow'}">
</div>
+ |
+
+
+ |
+
+
+ | no filter |
+ <div ng-bind="snippet">
</div> |
+ |
+
+
+
+
+ angular.module('linkyExample', ['ngSanitize'])
+ .controller('ExampleController', ['$scope', function($scope) {
+ $scope.snippet =
+ 'Pretty text with some links:\n'+
+ 'http://angularjs.org/,\n'+
+ 'mailto:us@somewhere.org,\n'+
+ 'another@somewhere.org,\n'+
+ 'and one more: ftp://127.0.0.1/.';
+ $scope.snippetWithSingleURL = 'http://angularjs.org/';
+ }]);
+
+
+ it('should linkify the snippet with urls', function() {
+ expect(element(by.id('linky-filter')).element(by.binding('snippet | linky')).getText()).
+ toBe('Pretty text with some links: http://angularjs.org/, us@somewhere.org, ' +
+ 'another@somewhere.org, and one more: ftp://127.0.0.1/.');
+ expect(element.all(by.css('#linky-filter a')).count()).toEqual(4);
+ });
+
+ it('should not linkify snippet without the linky filter', function() {
+ expect(element(by.id('escaped-html')).element(by.binding('snippet')).getText()).
+ toBe('Pretty text with some links: http://angularjs.org/, mailto:us@somewhere.org, ' +
+ 'another@somewhere.org, and one more: ftp://127.0.0.1/.');
+ expect(element.all(by.css('#escaped-html a')).count()).toEqual(0);
+ });
+
+ it('should update', function() {
+ element(by.model('snippet')).clear();
+ element(by.model('snippet')).sendKeys('new http://link.');
+ expect(element(by.id('linky-filter')).element(by.binding('snippet | linky')).getText()).
+ toBe('new http://link.');
+ expect(element.all(by.css('#linky-filter a')).count()).toEqual(1);
+ expect(element(by.id('escaped-html')).element(by.binding('snippet')).getText())
+ .toBe('new http://link.');
+ });
+
+ it('should work with the target property', function() {
+ expect(element(by.id('linky-target')).
+ element(by.binding("snippetWithSingleURL | linky:'_blank'")).getText()).
+ toBe('http://angularjs.org/');
+ expect(element(by.css('#linky-target a')).getAttribute('target')).toEqual('_blank');
+ });
+
+ it('should optionally add custom attributes', function() {
+ expect(element(by.id('linky-custom-attributes')).
+ element(by.binding("snippetWithSingleURL | linky:'_self':{rel: 'nofollow'}")).getText()).
+ toBe('http://angularjs.org/');
+ expect(element(by.css('#linky-custom-attributes a')).getAttribute('rel')).toEqual('nofollow');
+ });
+
+
+ */
+angular.module('ngSanitize').filter('linky', ['$sanitize', function($sanitize) {
+ var LINKY_URL_REGEXP =
+ /((ftp|https?):\/\/|(www\.)|(mailto:)?[A-Za-z0-9._%+-]+@)\S*[^\s.;,(){}<>"\u201d\u2019]/i,
+ MAILTO_REGEXP = /^mailto:/i;
+
+ var linkyMinErr = angular.$$minErr('linky');
+ var isDefined = angular.isDefined;
+ var isFunction = angular.isFunction;
+ var isObject = angular.isObject;
+ var isString = angular.isString;
+
+ return function(text, target, attributes) {
+ if (text == null || text === '') return text;
+ if (!isString(text)) throw linkyMinErr('notstring', 'Expected string but received: {0}', text);
+
+ var attributesFn =
+ isFunction(attributes) ? attributes :
+ isObject(attributes) ? function getAttributesObject() {return attributes;} :
+ function getEmptyAttributesObject() {return {};};
+
+ var match;
+ var raw = text;
+ var html = [];
+ var url;
+ var i;
+ while ((match = raw.match(LINKY_URL_REGEXP))) {
+ // We can not end in these as they are sometimes found at the end of the sentence
+ url = match[0];
+ // if we did not match ftp/http/www/mailto then assume mailto
+ if (!match[2] && !match[4]) {
+ url = (match[3] ? 'http://' : 'mailto:') + url;
+ }
+ i = match.index;
+ addText(raw.substr(0, i));
+ addLink(url, match[0].replace(MAILTO_REGEXP, ''));
+ raw = raw.substring(i + match[0].length);
+ }
+ addText(raw);
+ return $sanitize(html.join(''));
+
+ function addText(text) {
+ if (!text) {
+ return;
+ }
+ html.push(sanitizeText(text));
+ }
+
+ function addLink(url, text) {
+ var key, linkAttributes = attributesFn(url);
+ html.push('
');
+ addText(text);
+ html.push('');
+ }
+ };
+}]);
+
+
+})(window, window.angular);
diff --git a/opal/static/js/opal/directives.js b/opal/static/js/opal/directives.js
index e357cdf69..a65b0c5fc 100644
--- a/opal/static/js/opal/directives.js
+++ b/opal/static/js/opal/directives.js
@@ -117,9 +117,10 @@ directives.directive('placeholder', function($timeout){
};
});
-directives.directive('markdown', function () {
+directives.directive('markdown', function ($sanitize) {
return function postLink (scope, element, attrs) {
var renderMarkdown = function(unrendered){
+ var unrendered = $sanitize(unrendered);
var converter = new Showdown.converter({extensions: [OpalDown]});
element.html(converter.makeHtml(unrendered));
}
diff --git a/opal/static/js/opal/utils.js b/opal/static/js/opal/utils.js
index cfccf2545..e07e845a7 100644
--- a/opal/static/js/opal/utils.js
+++ b/opal/static/js/opal/utils.js
@@ -18,6 +18,7 @@ OPAL.module = function(namespace, dependencies){
'ngCookies',
'angulartics',
'angulartics.google.analytics',
+ 'ngSanitize',
'LocalStorageModule',
];
diff --git a/opal/static/js/test/utilsTest.js b/opal/static/js/test/utilsTest.js
index 0edb4b8b0..242ea838b 100644
--- a/opal/static/js/test/utilsTest.js
+++ b/opal/static/js/test/utilsTest.js
@@ -168,6 +168,7 @@ describe("OPAL.module", function(){
'ngCookies',
'angulartics',
'angulartics.google.analytics',
+ 'ngSanitize',
'LocalStorageModule'
];
diff --git a/opal/tests/js_config/karma_defaults.js b/opal/tests/js_config/karma_defaults.js
index aa29b451a..dc147382b 100644
--- a/opal/tests/js_config/karma_defaults.js
+++ b/opal/tests/js_config/karma_defaults.js
@@ -14,6 +14,7 @@ module.exports = function(includedFiles, baseDir, coverageFiles){
"lib/bower_components/angular-cookies/angular-cookies.js",
"lib/bower_components/angular-mocks/angular-mocks.js",
'lib/angular-ui-utils-0.1.0/ui-utils.js',
+ 'lib/angular-sanitize.js',
"lib/ui-bootstrap-tpls-0.14.3.js",
"lib/angulartics-0.17.2/angulartics.min.js",
"lib/angulartics-0.17.2/angulartics-ga.min.js",