- Move all inline <script> blocks (layout head/theme, topbar dark toggle, foot, paste, new, history, mine, settings, admin, unlock) to external files under internal/web/static/. Page data reaches scripts via data-* attributes (data-paste-id, data-default-dark) instead of template vars. - Replace inline onclick handlers (copy, delete, stats toggle) with addEventListener wiring. - Convert inline style="" attributes to CSS utility classes; swatch colors are now set via CSSOM/DOM APIs instead of innerHTML strings. - script-src/style-src are now plain 'self'; img-src data: stays for the SVG data-URI backgrounds. Verified with headless chromium: zero CSP violations on all pages in dark and light presets, theme swatches, admin lock, tables and paste view render correctly.
37 lines
1.5 KiB
HTML
37 lines
1.5 KiB
HTML
{{template "head" .}}
|
|
{{template "topbar" .}}
|
|
<div class="center">
|
|
<div class="float can-page">
|
|
<div class="inner">
|
|
<h1>{{.Title}} <span class="badge" title="This is a can — a bundle of pastes">can</span></h1>
|
|
{{if .HasDescription}}<p class="sub">{{.Description}}</p>{{end}}
|
|
<p class="hint">{{.ItemCount}} item{{if ne .ItemCount 1}}s{{end}} · {{.SizeHuman}} · created <span data-ts="{{.CreatedAtUnix}}">{{.CreatedAgo}}</span>{{if .ExpiresAt}} · expires in {{.ExpiresIn}}{{end}}{{if .HasPassword}} · password protected{{end}}</p>
|
|
|
|
<div class="can-items">
|
|
{{range .Items}}
|
|
<div class="can-item float">
|
|
<div class="can-item-head">
|
|
<strong>{{.Title}}</strong>
|
|
<span class="dim">{{.Size}}</span>
|
|
{{if .IsFile}}
|
|
<a class="btn btn-icon" href="/api/cans/{{$.ID}}/items/{{.ID}}" download="{{.Title}}" title="Download file" aria-label="Download {{.Title}}">↓</a>
|
|
{{else}}
|
|
<a class="btn btn-icon" href="/api/cans/{{$.ID}}/items/{{.ID}}" title="Raw item" aria-label="Raw {{.Title}}">⧉</a>
|
|
{{end}}
|
|
</div>
|
|
{{if not .IsFile}}
|
|
<details class="can-item-body">
|
|
<summary>Show content</summary>
|
|
<pre class="code"><code>{{.ContentHTML}}</code></pre>
|
|
</details>
|
|
{{else}}
|
|
<div class="hint">Attached file — use the download button above.</div>
|
|
{{end}}
|
|
</div>
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
{{template "foot" .}}
|