// static/js/emailLibrary/utils.js // // Pure helpers extracted from emailLibrary.js. No DOM state, no fetch, // no shared mutable references — safe to import anywhere. // ── Talon-inspired multilingual quote-detection regexes ─────────── // Borrowed (loosely) from Mailgun's `talon` library. These are partial // regex source strings — combined with surrounding patterns by callers. // Multilingual on purpose: a typed "wrote:" line is locale-bound, and // people forward / reply across language settings all the time. export const _TALON_WROTE = '(?:wrote|écrit|escribió|scrisse|schrieb|skrev|schreef|napisał|написал|napsal|написа|έγραψε|katselivat|napisao|написав|napisała|napisali|hat geschrieben|kirjoitti|написала|escreveu|napisao|написа|написала)'; export const _TALON_FROM = '(?:From|Från|Von|De|Da|От|Od|Van|差出人|发件人|寄件人|Ut|Frá|Lähettäjä|Avsender|Pošiljatelj|Од|Від|Posiljatelj|Frå)'; export const _TALON_SENT = '(?:Sent|Skickat|Gesendet|Envoy[ée]|Inviato|Enviado|Verzonden|Отправлено|Wysłane|Date|送信日時|发送时间|寄件日期|Sendt|Lähetetty|Tarih|Datum|Data|Datum)'; export const _TALON_SUBJ = '(?:Subject|Ämne|Betreff|Objet|Oggetto|Asunto|Onderwerp|Тема|Temat|件名|主题|主旨|Emne|Aihe|Onderwerp|Konu)'; export const _TALON_TO = '(?:To|Till|An|À|A|Voor|Para|Naar|Кому|Do|宛先|收件人|Emri|Komu)'; export const _TALON_ORIG_RE = /(?:^|\n)[\s>]*[-_=]{3,}\s*(?:Original\s+Message|Forwarded\s+message|Ursprüngliche\s+Nachricht|Mensaje\s+original|Messaggio\s+originale|Message\s+d['’]origine|Oorspronkelijk\s+bericht|Original\s+meddelande|Vor[ ]asal[a]\s+meddelande|原文|原始邮件|転送)\s*[-_=]{3,}/i; // Minimum plain-text length of a "signature" before we bother folding it. // Short closings ("Cheers, John") stay inline — folding them would add // a click for two bytes of saving. export const _SIG_BLOAT_MIN_CHARS = 200; // HTML-escape a string by round-tripping through a detached div. Cheap // and correct (handles all the entities that matter for innerHTML). export function _esc(text) { const div = document.createElement('div'); div.textContent = text || ''; return div.innerHTML; } // Escape + linkify URLs and email addresses. Returns innerHTML-safe markup. export function _escLinkify(text) { const escaped = _esc(text); // URLs: http(s)://... or www.... const urlRe = /\b((?:https?:\/\/|www\.)[^\s<>"']+[^\s<>"'.,;:!?)\]])/g; const mailRe = /\b([A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,})\b/g; return escaped .replace(urlRe, (m) => { const href = m.startsWith('www.') ? `https://${m}` : m; return `${m}`; }) .replace(mailRe, (m) => `${m}`); } // Pull display name out of "Name "; fallback to local-part of // the email; final fallback to the input string. export function _extractName(addr) { const m = addr.match(/^"?([^"<]+?)"?\s*<([^>]+)>\s*$/); if (m) return m[1].trim(); const localPart = addr.split('@')[0]; return localPart || addr; } // Parse the "Author · Date" metadata string emitted by the // server-side thread parser. export function _parseTurnMeta(meta) { if (!meta) return { author: '', email: '', date: '' }; const m = String(meta); const eMatch = m.match(/<([^<>\s]+@[^<>\s]+)>/) || m.match(/\b([\w.+-]+@[\w.-]+\.[A-Za-z]{2,})\b/); const email = eMatch ? eMatch[1].toLowerCase().trim() : ''; const parts = m.split(/\s+[·•]\s+/); let author = '', date = ''; if (parts.length >= 2) { author = parts[0].replace(/<[^>]+>/g, '').trim(); date = parts.slice(1).join(' · ').trim(); } else { author = m.replace(/<[^>]+>/g, '').trim(); } return { author, email, date }; } // Short, locale-aware display string for a chat-bubble timestamp. // Returns '' for invalid / empty input. export function _formatBubbleDate(iso) { if (!iso) return ''; const d = new Date(iso); if (!d || isNaN(d.getTime())) return ''; try { return d.toLocaleString(undefined, { month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit', }); } catch (_) { return ''; } } // Format a raw "to" address string ("Foo , bar@y.com") into a // short, readable list — display names when present, just the local part // of the email otherwise, and ", +N" once there are more than 2 recipients. export function _formatRecipients(raw) { if (!raw) return ''; const addrs = String(raw).split(',').map(s => s.trim()).filter(Boolean); if (!addrs.length) return ''; const friendly = addrs.map(a => { const m = a.match(/^\s*"?([^"<]+?)"?\s*<[^>]+>\s*$/); if (m && m[1].trim()) return m[1].trim(); const em = a.replace(/[<>]/g, '').trim(); return em.split('@')[0] || em; }); if (friendly.length === 1) return friendly[0]; if (friendly.length === 2) return friendly.join(', '); return friendly.slice(0, 2).join(', ') + ' +' + (friendly.length - 2); } // Deterministic per-sender colour. Same hashing as // emailInbox.js#_senderColor so a sender's avatar / name colour matches // across the list view and the bubble reader. export function _senderColor(name) { if (!name) return 'hsl(220, 55%, 65%)'; const key = String(name).toLowerCase(); let hash = 0; for (let i = 0; i < key.length; i++) { hash = ((hash << 5) - hash + key.charCodeAt(i)) | 0; } const hue = ((hash % 360) + 360) % 360; return `hsl(${hue}, 55%, 65%)`; } // 1- or 2-letter initials for an avatar bubble. Unicode-friendly. export function _initials(s) { if (!s) return '?'; const clean = String(s).replace(/<[^>]+>/g, '').replace(/[^\p{L}\s]/gu, ' ').trim(); const parts = clean.split(/\s+/).filter(Boolean); if (!parts.length) return '?'; const first = parts[0][0] || ''; const last = parts.length > 1 ? parts[parts.length - 1][0] : ''; return (first + last).toUpperCase(); } // HTML sanitizer for rendering remote email bodies. Strips script/iframe/ // form/style/etc., kills `on*` handlers, blocks `javascript:`/`vbscript:`/ // `data:` URLs on every known URL attribute, scrubs inline colour/font/ // position styles so the theme can take over, and wraps highlight-bearing // inline tags in so they render legibly across themes. export function _sanitizeHtml(html) { const doc = new DOMParser().parseFromString(html, 'text/html'); doc.querySelectorAll( 'script, iframe, object, embed, form, style, link, ' + 'svg, math, base, meta, noscript, frame, frameset, applet, portal' ).forEach(el => el.remove()); const URL_ATTRS = ['href', 'src', 'srcset', 'action', 'formaction', 'background', 'poster', 'data']; const isDangerousUrl = (val) => { if (!val) return false; const v = val.trim().toLowerCase(); return v.startsWith('javascript:') || v.startsWith('vbscript:') || v.startsWith('data:'); }; const STRIP_CSS_PROPS = ['color', 'background', 'background-color', 'font-family', 'font', '-webkit-text-fill-color', 'position', 'z-index']; const HIGHLIGHT_INLINE_TAGS = new Set(['SPAN', 'FONT', 'EM', 'B', 'I', 'STRONG', 'SMALL', 'U']); const HAS_BG_COLOR = /background(?:-color)?\s*:\s*(?!\s*(?:transparent|none|inherit|initial)\b)[^;]+/i; const _markedForHighlight = []; doc.querySelectorAll('*').forEach(el => { for (const attr of [...el.attributes]) { const name = attr.name.toLowerCase(); if (name.startsWith('on')) { el.removeAttribute(attr.name); continue; } if (name === 'srcdoc') { el.removeAttribute(attr.name); continue; } if (URL_ATTRS.includes(name) && isDangerousUrl(attr.value)) { el.removeAttribute(attr.name); continue; } } el.removeAttribute('color'); const bgcolor = el.getAttribute('bgcolor'); el.removeAttribute('bgcolor'); el.removeAttribute('face'); const style = el.getAttribute('style'); const hadHighlight = HIGHLIGHT_INLINE_TAGS.has(el.tagName) && ((style && HAS_BG_COLOR.test(style)) || (bgcolor && bgcolor !== 'transparent')); if (hadHighlight) _markedForHighlight.push(el); if (style) { const kept = style.split(';').map(s => s.trim()).filter(decl => { if (!decl) return false; const lower = decl.toLowerCase(); if (lower.includes('javascript:') || lower.includes('expression(')) return false; const prop = decl.split(':', 1)[0].trim().toLowerCase(); return !STRIP_CSS_PROPS.includes(prop); }); if (kept.length) el.setAttribute('style', kept.join('; ')); else el.removeAttribute('style'); } if (el.tagName === 'A') { el.setAttribute('target', '_blank'); el.setAttribute('rel', 'noopener noreferrer'); } }); _markedForHighlight.forEach(el => { if (el.tagName === 'MARK' || !el.firstChild) return; const mark = doc.createElement('mark'); while (el.firstChild) mark.appendChild(el.firstChild); el.appendChild(mark); }); return doc.body.innerHTML; }