diff --git a/pkg/migration/20231022144641.go b/pkg/migration/20231022144641.go new file mode 100644 index 00000000000..c02b728109f --- /dev/null +++ b/pkg/migration/20231022144641.go @@ -0,0 +1,96 @@ +// Vikunja is a to-do list application to facilitate your life. +// Copyright 2018-present Vikunja and contributors. All rights reserved. +// +// This program is free software: you can redistribute it and/or modify +// it under the terms of the GNU Affero General Public Licensee as published by +// the Free Software Foundation, either version 3 of the License, or +// (at your option) any later version. +// +// This program is distributed in the hope that it will be useful, +// but WITHOUT ANY WARRANTY; without even the implied warranty of +// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +// GNU Affero General Public Licensee for more details. +// +// You should have received a copy of the GNU Affero General Public Licensee +// along with this program. If not, see . + +package migration + +import ( + "bytes" + templatehtml "html/template" + "strings" + + "github.com/yuin/goldmark" + "src.techknowlogick.com/xormigrate" + "xorm.io/xorm" +) + +func convertMarkdownToHTML(input string) (output string, err error) { + md := []byte(templatehtml.HTMLEscapeString(input)) + var buf bytes.Buffer + err = goldmark.Convert(md, &buf) + if err != nil { + return + } + //#nosec - the html is escaped few lines before + return buf.String(), nil +} + +func convertDescription(tx *xorm.Engine, table string, column string) (err error) { + items := []map[string]interface{}{} + err = tx.Table(table). + Select("id, " + column). + Find(&items) + if err != nil { + return + } + + for _, task := range items { + if task[column] == "" || strings.HasPrefix(task[column].(string), "<") { + continue + } + + task[column], err = convertMarkdownToHTML(task[column].(string)) + if err != nil { + return + } + _, err = tx.Where("id = ?", task["id"]). + Table(table). + Cols(column). + Update(task) + if err != nil { + return + } + } + + return +} + +func init() { + migrations = append(migrations, &xormigrate.Migration{ + ID: "20231022144641", + Description: "Convert all descriptions to HTML", + Migrate: func(tx *xorm.Engine) (err error) { + + for _, table := range []string{ + "tasks", + "labels", + "projects", + "saved_filters", + "teams", + } { + err = convertDescription(tx, table, "description") + if err != nil { + return + } + } + + err = convertDescription(tx, "task_comments", "comment") + return + }, + Rollback: func(tx *xorm.Engine) error { + return nil + }, + }) +} diff --git a/pkg/routes/api/v1/notifications.go b/pkg/routes/api/v1/notifications.go index 783d50dfcff..55e62cb3ab6 100644 --- a/pkg/routes/api/v1/notifications.go +++ b/pkg/routes/api/v1/notifications.go @@ -17,12 +17,13 @@ package v1 import ( + "net/http" + "code.vikunja.io/api/pkg/db" "code.vikunja.io/api/pkg/models" "code.vikunja.io/api/pkg/modules/auth" "code.vikunja.io/api/pkg/notifications" "github.com/labstack/echo/v4" - "net/http" ) // MarkAllNotificationsAsRead marks all notifications of a user as read