- Add admin menu permission check in CustomPageView (visibility + role) - Sanitize SVG content with DOMPurify before v-html rendering (XSS prevention) - Decouple router.go from dto package using anonymous struct - Consolidate duplicate parseCustomMenuItems into dto.ParseCustomMenuItems - Enhance menu item validation (count, length, ID uniqueness limits) - Add audit logging for purchase_subscription and custom_menu_items changes - Update API contract test to include custom_menu_items field Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
171 lines
4.8 KiB
Vue
171 lines
4.8 KiB
Vue
<template>
|
|
<AppLayout>
|
|
<div class="custom-page-layout">
|
|
<div class="card flex-1 min-h-0 overflow-hidden">
|
|
<div v-if="loading" class="flex h-full items-center justify-center py-12">
|
|
<div
|
|
class="h-8 w-8 animate-spin rounded-full border-2 border-primary-500 border-t-transparent"
|
|
></div>
|
|
</div>
|
|
|
|
<div
|
|
v-else-if="!menuItem"
|
|
class="flex h-full items-center justify-center p-10 text-center"
|
|
>
|
|
<div class="max-w-md">
|
|
<div
|
|
class="mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-gray-100 dark:bg-dark-700"
|
|
>
|
|
<Icon name="link" size="lg" class="text-gray-400" />
|
|
</div>
|
|
<h3 class="text-lg font-semibold text-gray-900 dark:text-white">
|
|
{{ t('customPage.notFoundTitle') }}
|
|
</h3>
|
|
<p class="mt-2 text-sm text-gray-500 dark:text-dark-400">
|
|
{{ t('customPage.notFoundDesc') }}
|
|
</p>
|
|
</div>
|
|
</div>
|
|
|
|
<div v-else-if="!isValidUrl" class="flex h-full items-center justify-center p-10 text-center">
|
|
<div class="max-w-md">
|
|
<div
|
|
class="mx-auto mb-4 flex h-12 w-12 items-center justify-center rounded-full bg-gray-100 dark:bg-dark-700"
|
|
>
|
|
<Icon name="link" size="lg" class="text-gray-400" />
|
|
</div>
|
|
<h3 class="text-lg font-semibold text-gray-900 dark:text-white">
|
|
{{ t('customPage.notConfiguredTitle') }}
|
|
</h3>
|
|
<p class="mt-2 text-sm text-gray-500 dark:text-dark-400">
|
|
{{ t('customPage.notConfiguredDesc') }}
|
|
</p>
|
|
</div>
|
|
</div>
|
|
|
|
<div v-else class="custom-embed-shell">
|
|
<a
|
|
:href="embeddedUrl"
|
|
target="_blank"
|
|
rel="noopener noreferrer"
|
|
class="btn btn-secondary btn-sm custom-open-fab"
|
|
>
|
|
<Icon name="externalLink" size="sm" class="mr-1.5" :stroke-width="2" />
|
|
{{ t('customPage.openInNewTab') }}
|
|
</a>
|
|
<iframe
|
|
:src="embeddedUrl"
|
|
class="custom-embed-frame"
|
|
allowfullscreen
|
|
></iframe>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
</AppLayout>
|
|
</template>
|
|
|
|
<script setup lang="ts">
|
|
import { computed, onMounted, onUnmounted, ref } from 'vue'
|
|
import { useRoute } from 'vue-router'
|
|
import { useI18n } from 'vue-i18n'
|
|
import { useAppStore } from '@/stores'
|
|
import { useAuthStore } from '@/stores/auth'
|
|
import AppLayout from '@/components/layout/AppLayout.vue'
|
|
import Icon from '@/components/icons/Icon.vue'
|
|
import { buildEmbeddedUrl, detectTheme } from '@/utils/embedded-url'
|
|
|
|
const { t } = useI18n()
|
|
const route = useRoute()
|
|
const appStore = useAppStore()
|
|
const authStore = useAuthStore()
|
|
|
|
const loading = ref(false)
|
|
const pageTheme = ref<'light' | 'dark'>('light')
|
|
let themeObserver: MutationObserver | null = null
|
|
|
|
const menuItemId = computed(() => route.params.id as string)
|
|
|
|
const menuItem = computed(() => {
|
|
const items = appStore.cachedPublicSettings?.custom_menu_items ?? []
|
|
const found = items.find((item) => item.id === menuItemId.value) ?? null
|
|
if (found && found.visibility === 'admin' && !authStore.isAdmin) {
|
|
return null
|
|
}
|
|
return found
|
|
})
|
|
|
|
const embeddedUrl = computed(() => {
|
|
if (!menuItem.value) return ''
|
|
return buildEmbeddedUrl(
|
|
menuItem.value.url,
|
|
authStore.user?.id,
|
|
authStore.token,
|
|
pageTheme.value,
|
|
)
|
|
})
|
|
|
|
const isValidUrl = computed(() => {
|
|
const url = embeddedUrl.value
|
|
return url.startsWith('http://') || url.startsWith('https://')
|
|
})
|
|
|
|
onMounted(async () => {
|
|
pageTheme.value = detectTheme()
|
|
|
|
if (typeof document !== 'undefined') {
|
|
themeObserver = new MutationObserver(() => {
|
|
pageTheme.value = detectTheme()
|
|
})
|
|
themeObserver.observe(document.documentElement, {
|
|
attributes: true,
|
|
attributeFilter: ['class'],
|
|
})
|
|
}
|
|
|
|
if (appStore.publicSettingsLoaded) return
|
|
loading.value = true
|
|
try {
|
|
await appStore.fetchPublicSettings()
|
|
} finally {
|
|
loading.value = false
|
|
}
|
|
})
|
|
|
|
onUnmounted(() => {
|
|
if (themeObserver) {
|
|
themeObserver.disconnect()
|
|
themeObserver = null
|
|
}
|
|
})
|
|
</script>
|
|
|
|
<style scoped>
|
|
.custom-page-layout {
|
|
@apply flex flex-col;
|
|
height: calc(100vh - 64px - 4rem);
|
|
}
|
|
|
|
.custom-embed-shell {
|
|
@apply relative;
|
|
@apply h-full w-full overflow-hidden rounded-2xl;
|
|
@apply bg-gradient-to-b from-gray-50 to-white dark:from-dark-900 dark:to-dark-950;
|
|
@apply p-0;
|
|
}
|
|
|
|
.custom-open-fab {
|
|
@apply absolute right-3 top-3 z-10;
|
|
@apply shadow-sm backdrop-blur supports-[backdrop-filter]:bg-white/80;
|
|
}
|
|
|
|
.custom-embed-frame {
|
|
display: block;
|
|
margin: 0;
|
|
width: 100%;
|
|
height: 100%;
|
|
border: 0;
|
|
border-radius: 0;
|
|
box-shadow: none;
|
|
background: transparent;
|
|
}
|
|
</style>
|