Odysseus v1.0
This commit is contained in:
202
static/js/emailLibrary/utils.js
Normal file
202
static/js/emailLibrary/utils.js
Normal file
@@ -0,0 +1,202 @@
|
||||
// static/js/emailLibrary/utils.js
|
||||
//
|
||||
// Pure helpers extracted from emailLibrary.js. No DOM state, no fetch,
|
||||
// no shared mutable references — safe to import anywhere.
|
||||
|
||||
// ── Talon-inspired multilingual quote-detection regexes ───────────
|
||||
// Borrowed (loosely) from Mailgun's `talon` library. These are partial
|
||||
// regex source strings — combined with surrounding patterns by callers.
|
||||
// Multilingual on purpose: a typed "wrote:" line is locale-bound, and
|
||||
// people forward / reply across language settings all the time.
|
||||
|
||||
export const _TALON_WROTE = '(?:wrote|écrit|escribió|scrisse|schrieb|skrev|schreef|napisał|написал|napsal|написа|έγραψε|katselivat|napisao|написав|napisała|napisali|hat geschrieben|kirjoitti|написала|escreveu|napisao|написа|написала)';
|
||||
|
||||
export const _TALON_FROM = '(?:From|Från|Von|De|Da|От|Od|Van|差出人|发件人|寄件人|Ut|Frá|Lähettäjä|Avsender|Pošiljatelj|Од|Від|Posiljatelj|Frå)';
|
||||
export const _TALON_SENT = '(?:Sent|Skickat|Gesendet|Envoy[ée]|Inviato|Enviado|Verzonden|Отправлено|Wysłane|Date|送信日時|发送时间|寄件日期|Sendt|Lähetetty|Tarih|Datum|Data|Datum)';
|
||||
export const _TALON_SUBJ = '(?:Subject|Ämne|Betreff|Objet|Oggetto|Asunto|Onderwerp|Тема|Temat|件名|主题|主旨|Emne|Aihe|Onderwerp|Konu)';
|
||||
export const _TALON_TO = '(?:To|Till|An|À|A|Voor|Para|Naar|Кому|Do|宛先|收件人|Emri|Komu)';
|
||||
export const _TALON_ORIG_RE = /(?:^|\n)[\s>]*[-_=]{3,}\s*(?:Original\s+Message|Ursprüngliche\s+Nachricht|Mensaje\s+original|Messaggio\s+originale|Message\s+d['’]origine|Oorspronkelijk\s+bericht|Original\s+meddelande|Vor[ ]asal[a]\s+meddelande|原文|原始邮件|転送)\s*[-_=]{3,}/i;
|
||||
|
||||
// Minimum plain-text length of a "signature" before we bother folding it.
|
||||
// Short closings ("Cheers, John") stay inline — folding them would add
|
||||
// a click for two bytes of saving.
|
||||
export const _SIG_BLOAT_MIN_CHARS = 200;
|
||||
|
||||
// HTML-escape a string by round-tripping through a detached div. Cheap
|
||||
// and correct (handles all the entities that matter for innerHTML).
|
||||
export function _esc(text) {
|
||||
const div = document.createElement('div');
|
||||
div.textContent = text || '';
|
||||
return div.innerHTML;
|
||||
}
|
||||
|
||||
// Escape + linkify URLs and email addresses. Returns innerHTML-safe markup.
|
||||
export function _escLinkify(text) {
|
||||
const escaped = _esc(text);
|
||||
// URLs: http(s)://... or www....
|
||||
const urlRe = /\b((?:https?:\/\/|www\.)[^\s<>"']+[^\s<>"'.,;:!?)\]])/g;
|
||||
const mailRe = /\b([A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,})\b/g;
|
||||
return escaped
|
||||
.replace(urlRe, (m) => {
|
||||
const href = m.startsWith('www.') ? `https://${m}` : m;
|
||||
return `<a href="${href}" target="_blank" rel="noopener noreferrer">${m}</a>`;
|
||||
})
|
||||
.replace(mailRe, (m) => `<a href="mailto:${m}">${m}</a>`);
|
||||
}
|
||||
|
||||
// Pull display name out of "Name <email@x>"; fallback to local-part of
|
||||
// the email; final fallback to the input string.
|
||||
export function _extractName(addr) {
|
||||
const m = addr.match(/^"?([^"<]+?)"?\s*<([^>]+)>\s*$/);
|
||||
if (m) return m[1].trim();
|
||||
const localPart = addr.split('@')[0];
|
||||
return localPart || addr;
|
||||
}
|
||||
|
||||
// Parse the "Author <email> · Date" metadata string emitted by the
|
||||
// server-side thread parser.
|
||||
export function _parseTurnMeta(meta) {
|
||||
if (!meta) return { author: '', email: '', date: '' };
|
||||
const m = String(meta);
|
||||
const eMatch = m.match(/<([^<>\s]+@[^<>\s]+)>/) ||
|
||||
m.match(/\b([\w.+-]+@[\w.-]+\.[A-Za-z]{2,})\b/);
|
||||
const email = eMatch ? eMatch[1].toLowerCase().trim() : '';
|
||||
const parts = m.split(/\s+[·•]\s+/);
|
||||
let author = '', date = '';
|
||||
if (parts.length >= 2) {
|
||||
author = parts[0].replace(/<[^>]+>/g, '').trim();
|
||||
date = parts.slice(1).join(' · ').trim();
|
||||
} else {
|
||||
author = m.replace(/<[^>]+>/g, '').trim();
|
||||
}
|
||||
return { author, email, date };
|
||||
}
|
||||
|
||||
// Short, locale-aware display string for a chat-bubble timestamp.
|
||||
// Returns '' for invalid / empty input.
|
||||
export function _formatBubbleDate(iso) {
|
||||
if (!iso) return '';
|
||||
const d = new Date(iso);
|
||||
if (!d || isNaN(d.getTime())) return '';
|
||||
try {
|
||||
return d.toLocaleString(undefined, {
|
||||
month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit',
|
||||
});
|
||||
} catch (_) { return ''; }
|
||||
}
|
||||
|
||||
// Format a raw "to" address string ("Foo <foo@x.com>, bar@y.com") into a
|
||||
// short, readable list — display names when present, just the local part
|
||||
// of the email otherwise, and ", +N" once there are more than 2 recipients.
|
||||
export function _formatRecipients(raw) {
|
||||
if (!raw) return '';
|
||||
const addrs = String(raw).split(',').map(s => s.trim()).filter(Boolean);
|
||||
if (!addrs.length) return '';
|
||||
const friendly = addrs.map(a => {
|
||||
const m = a.match(/^\s*"?([^"<]+?)"?\s*<[^>]+>\s*$/);
|
||||
if (m && m[1].trim()) return m[1].trim();
|
||||
const em = a.replace(/[<>]/g, '').trim();
|
||||
return em.split('@')[0] || em;
|
||||
});
|
||||
if (friendly.length === 1) return friendly[0];
|
||||
if (friendly.length === 2) return friendly.join(', ');
|
||||
return friendly.slice(0, 2).join(', ') + ' +' + (friendly.length - 2);
|
||||
}
|
||||
|
||||
// Deterministic per-sender colour. Same hashing as
|
||||
// emailInbox.js#_senderColor so a sender's avatar / name colour matches
|
||||
// across the list view and the bubble reader.
|
||||
export function _senderColor(name) {
|
||||
if (!name) return 'hsl(220, 55%, 65%)';
|
||||
const key = String(name).toLowerCase();
|
||||
let hash = 0;
|
||||
for (let i = 0; i < key.length; i++) {
|
||||
hash = ((hash << 5) - hash + key.charCodeAt(i)) | 0;
|
||||
}
|
||||
const hue = ((hash % 360) + 360) % 360;
|
||||
return `hsl(${hue}, 55%, 65%)`;
|
||||
}
|
||||
|
||||
// 1- or 2-letter initials for an avatar bubble. Unicode-friendly.
|
||||
export function _initials(s) {
|
||||
if (!s) return '?';
|
||||
const clean = String(s).replace(/<[^>]+>/g, '').replace(/[^\p{L}\s]/gu, ' ').trim();
|
||||
const parts = clean.split(/\s+/).filter(Boolean);
|
||||
if (!parts.length) return '?';
|
||||
const first = parts[0][0] || '';
|
||||
const last = parts.length > 1 ? parts[parts.length - 1][0] : '';
|
||||
return (first + last).toUpperCase();
|
||||
}
|
||||
|
||||
// HTML sanitizer for rendering remote email bodies. Strips script/iframe/
|
||||
// form/style/etc., kills `on*` handlers, blocks `javascript:`/`vbscript:`/
|
||||
// `data:` URLs on every known URL attribute, scrubs inline colour/font/
|
||||
// position styles so the theme can take over, and wraps highlight-bearing
|
||||
// inline tags in <mark> so they render legibly across themes.
|
||||
export function _sanitizeHtml(html) {
|
||||
const doc = new DOMParser().parseFromString(html, 'text/html');
|
||||
doc.querySelectorAll(
|
||||
'script, iframe, object, embed, form, style, link, ' +
|
||||
'svg, math, base, meta, noscript, frame, frameset, applet, portal'
|
||||
).forEach(el => el.remove());
|
||||
|
||||
const URL_ATTRS = ['href', 'src', 'srcset', 'action', 'formaction', 'background', 'poster', 'data'];
|
||||
const isDangerousUrl = (val) => {
|
||||
if (!val) return false;
|
||||
const v = val.trim().toLowerCase();
|
||||
return v.startsWith('javascript:') || v.startsWith('vbscript:') || v.startsWith('data:');
|
||||
};
|
||||
|
||||
const STRIP_CSS_PROPS = ['color', 'background', 'background-color',
|
||||
'font-family', 'font', '-webkit-text-fill-color',
|
||||
'position', 'z-index'];
|
||||
const HIGHLIGHT_INLINE_TAGS = new Set(['SPAN', 'FONT', 'EM', 'B', 'I',
|
||||
'STRONG', 'SMALL', 'U']);
|
||||
const HAS_BG_COLOR = /background(?:-color)?\s*:\s*(?!\s*(?:transparent|none|inherit|initial)\b)[^;]+/i;
|
||||
const _markedForHighlight = [];
|
||||
|
||||
doc.querySelectorAll('*').forEach(el => {
|
||||
for (const attr of [...el.attributes]) {
|
||||
const name = attr.name.toLowerCase();
|
||||
if (name.startsWith('on')) { el.removeAttribute(attr.name); continue; }
|
||||
if (name === 'srcdoc') { el.removeAttribute(attr.name); continue; }
|
||||
if (URL_ATTRS.includes(name) && isDangerousUrl(attr.value)) {
|
||||
el.removeAttribute(attr.name);
|
||||
continue;
|
||||
}
|
||||
}
|
||||
el.removeAttribute('color');
|
||||
const bgcolor = el.getAttribute('bgcolor');
|
||||
el.removeAttribute('bgcolor');
|
||||
el.removeAttribute('face');
|
||||
const style = el.getAttribute('style');
|
||||
const hadHighlight =
|
||||
HIGHLIGHT_INLINE_TAGS.has(el.tagName) &&
|
||||
((style && HAS_BG_COLOR.test(style)) || (bgcolor && bgcolor !== 'transparent'));
|
||||
if (hadHighlight) _markedForHighlight.push(el);
|
||||
if (style) {
|
||||
const kept = style.split(';').map(s => s.trim()).filter(decl => {
|
||||
if (!decl) return false;
|
||||
const lower = decl.toLowerCase();
|
||||
if (lower.includes('javascript:') || lower.includes('expression(')) return false;
|
||||
const prop = decl.split(':', 1)[0].trim().toLowerCase();
|
||||
return !STRIP_CSS_PROPS.includes(prop);
|
||||
});
|
||||
if (kept.length) el.setAttribute('style', kept.join('; '));
|
||||
else el.removeAttribute('style');
|
||||
}
|
||||
if (el.tagName === 'A') {
|
||||
el.setAttribute('target', '_blank');
|
||||
el.setAttribute('rel', 'noopener noreferrer');
|
||||
}
|
||||
});
|
||||
|
||||
_markedForHighlight.forEach(el => {
|
||||
if (el.tagName === 'MARK' || !el.firstChild) return;
|
||||
const mark = doc.createElement('mark');
|
||||
while (el.firstChild) mark.appendChild(el.firstChild);
|
||||
el.appendChild(mark);
|
||||
});
|
||||
|
||||
return doc.body.innerHTML;
|
||||
}
|
||||
Reference in New Issue
Block a user