diff --git a/cps/clean_html.py b/cps/clean_html.py new file mode 100644 index 000000000..19e875998 --- /dev/null +++ b/cps/clean_html.py @@ -0,0 +1,53 @@ +# -*- coding: utf-8 -*- + +# This file is part of the Calibre-Web (https://github.com/janeczku/calibre-web) +# Copyright (C) 2018-2019 OzzieIsaacs +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see . + +from . import logger +from lxml.etree import ParserError + +try: + # at least bleach 6.0 is needed -> incomplatible change from list arguments to set arguments + from bleach import clean_text as clean_html + BLEACH = True +except ImportError: + try: + BLEACH = False + from nh3 import clean as clean_html + except ImportError: + try: + BLEACH = False + from lxml.html.clean import clean_html + except ImportError: + clean_html = None + + +log = logger.create() + + +def clean_string(unsafe_text, book_id=0): + try: + if BLEACH: + safe_text = clean_html(unsafe_text, tags=set(), attributes=set()) + else: + safe_text = clean_html(unsafe_text) + except ParserError as e: + log.error("Comments of book {} are corrupted: {}".format(book_id, e)) + safe_text = "" + except TypeError as e: + log.error("Comments can't be parsed, maybe 'lxml' is too new, try installing 'bleach': {}".format(e)) + safe_text = "" + return safe_text diff --git a/cps/editbooks.py b/cps/editbooks.py index 030fbf90f..43309a148 100644 --- a/cps/editbooks.py +++ b/cps/editbooks.py @@ -27,22 +27,22 @@ from shutil import copyfile from uuid import uuid4 from markupsafe import escape, Markup # dependency of flask from functools import wraps -from lxml.etree import ParserError +# from lxml.etree import ParserError -try: - # at least bleach 6.0 is needed -> incomplatible change from list arguments to set arguments - from bleach import clean_text as clean_html - BLEACH = True -except ImportError: - try: - BLEACH = False - from nh3 import clean as clean_html - except ImportError: - try: - BLEACH = False - from lxml.html.clean import clean_html - except ImportError: - clean_html = None +#try: +# # at least bleach 6.0 is needed -> incomplatible change from list arguments to set arguments +# from bleach import clean_text as clean_html +# BLEACH = True +#except ImportError: +# try: +# BLEACH = False +# from nh3 import clean as clean_html +# except ImportError: +# try: +# BLEACH = False +# from lxml.html.clean import clean_html +# except ImportError: +# clean_html = None from flask import Blueprint, request, flash, redirect, url_for, abort, Response from flask_babel import gettext as _ @@ -54,6 +54,7 @@ from sqlalchemy.orm.exc import StaleDataError from sqlalchemy.sql.expression import func from . import constants, logger, isoLanguages, gdriveutils, uploader, helper, kobo_sync_status +from .clean_html import clean_string from . import config, ub, db, calibre_db from .services.worker import WorkerThread from .tasks.upload import TaskUpload @@ -1004,17 +1005,18 @@ def edit_book_series_index(series_index, book): def edit_book_comments(comments, book): modify_date = False if comments: - try: - if BLEACH: - comments = clean_html(comments, tags=set(), attributes=set()) - else: - comments = clean_html(comments) - except ParserError as e: - log.error("Comments of book {} are corrupted: {}".format(book.id, e)) - comments = "" - except TypeError as e: - log.error("Comments can't be parsed, maybe 'lxml' is too new, try installing 'bleach': {}".format(e)) - comments = "" + comments = clean_string(comments, book.id) + #try: + # if BLEACH: + # comments = clean_html(comments, tags=set(), attributes=set()) + # else: + # comments = clean_html(comments) + #except ParserError as e: + # log.error("Comments of book {} are corrupted: {}".format(book.id, e)) + # comments = "" + #except TypeError as e: + # log.error("Comments can't be parsed, maybe 'lxml' is too new, try installing 'bleach': {}".format(e)) + # comments = "" if len(book.comments): if book.comments[0].text != comments: book.comments[0].text = comments @@ -1072,18 +1074,19 @@ def edit_cc_data_value(book_id, book, c, to_save, cc_db_value, cc_string): elif c.datatype == 'comments': to_save[cc_string] = Markup(to_save[cc_string]).unescape() if to_save[cc_string]: - try: - if BLEACH: - to_save[cc_string] = clean_html(to_save[cc_string], tags=set(), attributes=set()) - else: - to_save[cc_string] = clean_html(to_save[cc_string]) - except ParserError as e: - log.error("Customs Comments of book {} are corrupted: {}".format(book_id, e)) - to_save[cc_string] = "" - except TypeError as e: - to_save[cc_string] = "" - log.error("Customs Comments can't be parsed, maybe 'lxml' is too new, " - "try installing 'bleach': {}".format(e)) + to_save[cc_string] = clean_string(to_save[cc_string], book_id) + #try: + # if BLEACH: + # to_save[cc_string] = clean_html(to_save[cc_string], tags=set(), attributes=set()) + # else: + # to_save[cc_string] = clean_html(to_save[cc_string]) + #except ParserError as e: + # log.error("Customs Comments of book {} are corrupted: {}".format(book_id, e)) + # to_save[cc_string] = "" + #except TypeError as e: + # to_save[cc_string] = "" + # log.error("Customs Comments can't be parsed, maybe 'lxml' is too new, " + # "try installing 'bleach': {}".format(e)) elif c.datatype == 'datetime': try: to_save[cc_string] = datetime.strptime(to_save[cc_string], "%Y-%m-%d") diff --git a/cps/services/goodreads_support.py b/cps/services/goodreads_support.py index 514cceea9..29c5c9f90 100644 --- a/cps/services/goodreads_support.py +++ b/cps/services/goodreads_support.py @@ -30,7 +30,7 @@ except ImportError: Levenshtein = False from .. import logger - +from ..clean_html import clean_string class my_GoodreadsClient(GoodreadsClient): @@ -52,7 +52,7 @@ class my_GoodreadsRequest(GoodreadsRequest): def request(self): resp = requests.get(self.host+self.path, params=self.params, - headers={"User-agent":"Mozilla/5.0 (X11; Linux x86_64; rv:125.0) " + headers={"User-Agent":"Mozilla/5.0 (X11; Linux x86_64; rv:125.0) " "Gecko/20100101 Firefox/125.0"}) if resp.status_code != 200: raise GoodreadsRequestException(resp.reason, self.path) @@ -84,7 +84,7 @@ def connect(key=None, enabled=True): _client = None if not _client: - _client = GoodreadsClient(key, None) + _client = my_GoodreadsClient(key, None) def get_author_info(author_name): @@ -109,6 +109,7 @@ def get_author_info(author_name): if author_info: author_info._timestamp = now + author_info.safe_about = clean_string(author_info.about) _AUTHORS_CACHE[author_name] = author_info return author_info diff --git a/cps/templates/author.html b/cps/templates/author.html index 3e82161c8..f7314586d 100644 --- a/cps/templates/author.html +++ b/cps/templates/author.html @@ -8,8 +8,8 @@ {{author.name}} {% endif %} - {%if author.about is not none %} -

{{author.about}}

+ {%if author.safe_about is not none %} +

{{author.safe_about|safe}}

{% endif %} - {{_("via")}} Goodreads diff --git a/cps/templates/config_edit.html b/cps/templates/config_edit.html index b03b7d6d6..0d0a695f6 100755 --- a/cps/templates/config_edit.html +++ b/cps/templates/config_edit.html @@ -9,7 +9,7 @@

{{title}}

-
+

@@ -155,7 +155,6 @@
- {{_('Create an API Key')}}
diff --git a/setup.cfg b/setup.cfg index 615a44dad..89edcbdef 100644 --- a/setup.cfg +++ b/setup.cfg @@ -58,6 +58,7 @@ install_requires = chardet>=3.0.0,<4.1.0 advocate>=1.0.0,<1.1.0 Flask-Limiter>=2.3.0,<3.6.0 + regex>=2022.3.2,<2024.2.25 [options.packages.find] @@ -85,7 +86,7 @@ goodreads = python-Levenshtein>=0.12.0,<0.26.0 ldap = python-ldap>=3.0.0,<3.5.0 - Flask-SimpleLDAP>=1.4.0,<1.5.0 + Flask-SimpleLDAP>=1.4.0,<2.1.0 oauth = Flask-Dance>=2.0.0,<7.1.0 SQLAlchemy-Utils>=0.33.5,<0.42.0 diff --git a/test/Calibre-Web TestSummary_Linux.html b/test/Calibre-Web TestSummary_Linux.html index 196ea1314..b1a91154a 100644 --- a/test/Calibre-Web TestSummary_Linux.html +++ b/test/Calibre-Web TestSummary_Linux.html @@ -37,20 +37,20 @@
-

Start Time: 2024-02-26 20:07:24

+

Start Time: 2024-05-10 20:24:40

-

Stop Time: 2024-02-27 03:19:17

+

Stop Time: 2024-05-11 03:33:47

-

Duration: 6h 0 min

+

Duration: 5h 58 min

@@ -320,38 +320,30 @@ - +
TestBackupMetadata - test_backup_change_book_series_index
- PASS - - - - - - -
TestBackupMetadata - test_backup_change_book_tags
-
- FAIL + FAIL
- 
Traceback (most recent call last):
-  File "/home/ozzie/Development/calibre-web-test/test/test_login.py", line 532, in test_proxy_login_multi_user
+  File "/home/ozzie/Development/calibre-web-test/test/test_login.py", line 575, in test_proxy_login_multi_user
     self.assertTrue('<input type="text" class="form-control" name="name" id="name" value="new_user1" autocomplete="off">' in resp.text)
 AssertionError: False is not true
@@ -5569,8 +5612,8 @@ AssertionError: False is not true Total 492 - 479 - 2 + 477 + 4 1 10   @@ -5600,7 +5643,7 @@ AssertionError: False is not true Platform - Linux 6.5.0-21-generic #21~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Fri Feb 9 13:32:52 UTC 2 x86_64 x86_64 + Linux 6.5.0-28-generic #29~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Apr 4 14:39:20 UTC 2 x86_64 x86_64 Basic @@ -5624,7 +5667,7 @@ AssertionError: False is not true Babel - 2.14.0 + 2.15.0 Basic @@ -5684,19 +5727,19 @@ AssertionError: False is not true Jinja2 - 3.1.3 + 3.1.4 Basic lxml - 5.1.0 + 5.1.1 Basic pyasn1 - 0.5.1 + 0.6.0 Basic @@ -5712,6 +5755,12 @@ AssertionError: False is not true Basic + + regex + 2023.12.25 + Basic + + requests 2.31.0 @@ -5720,7 +5769,7 @@ AssertionError: False is not true SQLAlchemy - 2.0.27 + 2.0.30 Basic @@ -5750,7 +5799,7 @@ AssertionError: False is not true google-api-python-client - 2.119.0 + 2.128.0 TestBackupMetadataGdrive @@ -5780,7 +5829,7 @@ AssertionError: False is not true google-api-python-client - 2.119.0 + 2.128.0 TestCliGdrivedb @@ -5810,7 +5859,7 @@ AssertionError: False is not true google-api-python-client - 2.119.0 + 2.128.0 TestEbookConvertCalibreGDrive @@ -5840,7 +5889,7 @@ AssertionError: False is not true google-api-python-client - 2.119.0 + 2.129.0 TestEbookConvertGDriveKepubify @@ -5876,25 +5925,25 @@ AssertionError: False is not true py7zr - 0.20.8 + 0.21.0 TestEditAdditionalBooks rarfile - 4.1 + 4.2 TestEditAdditionalBooks py7zr - 0.20.8 + 0.21.0 TestEditBooks google-api-python-client - 2.119.0 + 2.129.0 TestEditAuthorsGdrive @@ -5930,7 +5979,7 @@ AssertionError: False is not true google-api-python-client - 2.119.0 + 2.129.0 TestEditBooksOnGdrive @@ -5972,7 +6021,7 @@ AssertionError: False is not true google-api-python-client - 2.119.0 + 2.129.0 TestEmbedMetadataGdrive @@ -6002,7 +6051,7 @@ AssertionError: False is not true google-api-python-client - 2.119.0 + 2.129.0 TestSetupGdrive @@ -6038,31 +6087,31 @@ AssertionError: False is not true python-Levenshtein - 0.25.0 + 0.25.1 TestGoodreads jsonschema - 4.21.1 + 4.22.0 TestKoboSync jsonschema - 4.21.1 + 4.22.0 TestKoboSyncBig Flask-SimpleLDAP - 1.4.0 + 2.0.0 TestLdapLogin jsonschema - 4.21.1 + 4.22.0 TestLdapLogin @@ -6074,13 +6123,13 @@ AssertionError: False is not true Flask-Dance - 7.0.1 + 7.1.0 TestOAuthLogin SQLAlchemy-Utils - 0.41.1 + 0.41.2 TestOAuthLogin @@ -6092,7 +6141,7 @@ AssertionError: False is not true