a36a4cac6b
Validation: the dump validators refuse the nulls their shared types don't allow (a null title or note on creation, a null URL on edit); a playlist title of spaces is refused and titles are stored trimmed; usernames and emails are checked by the same USERNAME_RE and EMAIL_RE in shared/validation.ts on sign-up, on PATCH /api/users/me (which checked other limits) and in the sign-up form. Mentions are read by shared/mention.ts's mentionedUsernames, which skips code and URLs as Markdown shows them: https://mastodon.social/@bob or a `@bob` in code notified bob; the editor's suggestions derive their trigger from the same pattern instead of a copy. Following an unknown user is a 404 rather than a foreign-key 500, and following a private playlist a 404 rather than a 403 that confirmed it exists. `ws` and `emojibase` are reserved category slugs, since the server answers them before the app. GET /api/users/me no longer turns every error into a 500. Dead code goes: adminOnlyMiddleware, verifyEmailTransport, listUsers, deleteUser with disconnectUser and the force_logout message only it sent, PATCH /api/notifications/:id/read (with markOneRead), isSlugAvailable, the unreachable 500 in fetchComment, and the `if (!ctx.state.user)` checks behind authMiddleware. 214 backend and 627 frontend tests pass. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
34 lines
1.3 KiB
TypeScript
34 lines
1.3 KiB
TypeScript
/**
|
|
* Defines what counts as an @mention, so that the server notifies the same
|
|
* users the chat highlights and the editor suggests.
|
|
*
|
|
* @module
|
|
*/
|
|
|
|
/**
|
|
* Matches an @username, with the name as its first group. The `@` must not
|
|
* follow a word character, so an email address mentions no one. Nor may it
|
|
* follow `[` or `(`, which leaves out a Markdown link's text or URL starting
|
|
* with `@`, and also a plain `(@name)`. The editor's suggestions match its
|
|
* source at the caret; the rest goes through {@link mentionedUsernames}.
|
|
* `Markdown` links mentions with a looser pattern of its own, on text already
|
|
* parsed, where code and URLs are out of the way.
|
|
*/
|
|
export const MENTION_RE: RegExp = /(?<![[(\w])@(\w+)/g;
|
|
|
|
/**
|
|
* Returns the names `body` mentions, in lower case, each once. Code, fenced
|
|
* or inline, and URLs mention no one, as `Markdown` shows them. The server
|
|
* notifies by it, and the chat highlights and chimes by it.
|
|
*/
|
|
export function mentionedUsernames(body: string): string[] {
|
|
const prose = body
|
|
// A fence left open runs to the end, as Markdown renders it.
|
|
.replace(/```[\s\S]*?(?:```|$)/g, " ")
|
|
.replace(/`[^`\n]*`/g, " ")
|
|
.replace(/https?:\/\/\S+/g, " ");
|
|
return [
|
|
...new Set([...prose.matchAll(MENTION_RE)].map((m) => m[1].toLowerCase())),
|
|
];
|
|
}
|