' + str(paragraph.text) + '
' excerpt += str(paragraph) if len(excerpt) >= 1000: break return excerpt def add_num_comments(post): num_comments = Comment.objects.filter(post=post).count() return num_comments def recent_posts(): recent_posts = Post.objects.filter(is_public=True).order_by('-date')[:5] for post in recent_posts: post.excerpt = add_excerpt(post) post.num_comments = add_num_comments(post) return recent_posts def categories(request): categories = Category.objects.all()[0:5] return {'categories': categories} def archives(request): archives = Post.objects.filter(is_public=True).dates('date', 'month', order='DESC')[0:5] return {'archives': archives} def avatar_list(): avatar_list = {} directory = os.path.join(settings.BASE_DIR, 'static', 'images', 'avatars') for directory in os.listdir(directory): # ignore hidden files if directory.startswith('.'): continue avatar_list[directory] = os.listdir(os.path.join(settings.BASE_DIR, 'static', 'images', 'avatars', directory)) # remove hidden files for file in avatar_list[directory]: if file.startswith('.'): avatar_list[directory].remove(file) return avatar_list def highlight_code_blocks(code_block, language=None): # replace with space try: cb = code_block.string except: cb = code_block cb = cb.replace(u'\xa0', u' ') # guess the language as there is no data-lang attribute if language: try: lexer = get_lexer_by_name(language.strip()) except: lexer = get_lexer_by_name('text') else: try: lexer = guess_lexer(cb) except: lexer = get_lexer_by_name('text') # highlight the code formatter = HtmlFormatter(noclasses=True, style='native', wrapcode=True) highlighted_code = highlight(cb, lexer, formatter) return highlighted_code def check_link_safety(link): api_key = os.getenv('GOOGLE_SAFE_BROWSING_API_KEY') api_url = 'https://safebrowsing.googleapis.com/v4/threatMatches:find' cache_key = f"link_safety:{link}" cache_timeout = 60 * 60 * 24 * 7 # 7 days # Check if the result is already cached cached_result = cache.get(cache_key) if cached_result is not None: return cached_result payload = { "threatInfo": { "threatTypes": ["MALWARE", "SOCIAL_ENGINEERING", "UNWANTED_SOFTWARE", "POTENTIALLY_HARMFUL_APPLICATION"], "platformTypes": ["ANY_PLATFORM"], "threatEntryTypes": ["URL"], "threatEntries": [{"url": link}] } } headers = { "Content-Type": "application/json" } params = { "key": api_key, "alt": "json" } response = requests.post(api_url, params=params, headers=headers, json=payload) if response.status_code == 200: # Successful API call matches = response.json().get('matches', []) # Cache the result cache.set(cache_key, len(matches) == 0, cache_timeout) return len(matches) == 0 else: # Handle API error print(f"Safe Browsing API error: {response.content}") return False def comment_processor(comment): # escape html tags comment = re.sub(r'<', '<', comment) comment = re.sub(r'>', '>', comment) # any text between ``` and ``` must be highlighted as code code_blocks = re.findall(r'```(.+?)```', comment, re.DOTALL) for code_block in code_blocks: if code_block.startswith('lang-'): language = code_block.split('\n')[0].replace('lang-', '') code_block = code_block.replace('lang-' + language + '\n', '') # comment = highlight_code_blocks(code_block.replace('<', '<').replace('>', '>'), language) comment = comment.replace('```lang-' + language + '\n' + code_block + '```', highlight_code_blocks(code_block.replace('<', '<').replace('>', '>'), language)) else: comment = comment.replace('```' + code_block + '```', highlight_code_blocks(code_block.replace('<', '<').replace('>', '>'))) # any http or https links must be converted to anchor tags links = re.findall(r'(https?://[^\s]+)', comment) for link in links: # check if the link is safe if check_link_safety(link): comment = comment.replace(link, '' + link + '') else: # do not replace the link if it is not safe. Add a warning message after the link instead comment = comment.replace(link, link + ' (Seems unsafe! Proceed with caution)') # retain line breaks, for every newline character, add a