" + str(paragraph.text) + "
" excerpt += str(paragraph) if len(excerpt) >= 1000: break return excerpt def add_num_comments(post): num_comments = Comment.objects.filter(post=post).count() return num_comments def recent_posts(): recent_posts = Post.objects.filter(is_public=True).order_by("-date")[:5] for post in recent_posts: post.excerpt = add_excerpt(post) post.num_comments = add_num_comments(post) return recent_posts def categories(request): categories = Category.objects.all()[0:5] return {"categories": categories} def archives(request): archives = Post.objects.filter(is_public=True).dates("date", "month", order="DESC")[ 0:5 ] return {"archives": archives} def avatar_list(): avatar_list = {} directory = os.path.join(settings.BASE_DIR, "static", "images", "avatars") for directory in os.listdir(directory): # ignore hidden files if directory.startswith("."): continue avatar_list[directory] = os.listdir( os.path.join(settings.BASE_DIR, "static", "images", "avatars", directory) ) # remove hidden files for file in avatar_list[directory]: if file.startswith("."): avatar_list[directory].remove(file) return avatar_list def highlight_code_blocks(code_block, language=None): # replace with space try: cb = code_block.string except: cb = code_block cb = cb.replace("\xa0", " ") # guess the language as there is no data-lang attribute if language: try: lexer = get_lexer_by_name(language.strip()) except: lexer = get_lexer_by_name("text") else: try: lexer = guess_lexer(cb) except: lexer = get_lexer_by_name("text") # highlight the code formatter = HtmlFormatter(noclasses=True, style="native", wrapcode=True) highlighted_code = highlight(cb, lexer, formatter) return highlighted_code def check_link_safety(link): api_key = os.getenv("GOOGLE_SAFE_BROWSING_API_KEY") api_url = "https://safebrowsing.googleapis.com/v4/threatMatches:find" cache_key = f"link_safety:{link}" cache_timeout = 60 * 60 * 24 * 7 # 7 days # Check if the result is already cached cached_result = cache.get(cache_key) if cached_result is not None: return cached_result payload = { "threatInfo": { "threatTypes": [ "MALWARE", "SOCIAL_ENGINEERING", "UNWANTED_SOFTWARE", "POTENTIALLY_HARMFUL_APPLICATION", ], "platformTypes": ["ANY_PLATFORM"], "threatEntryTypes": ["URL"], "threatEntries": [{"url": link}], } } headers = {"Content-Type": "application/json"} params = {"key": api_key, "alt": "json"} response = requests.post(api_url, params=params, headers=headers, json=payload) if response.status_code == 200: # Successful API call matches = response.json().get("matches", []) # Cache the result cache.set(cache_key, len(matches) == 0, cache_timeout) return len(matches) == 0 else: # Handle API error print(f"Safe Browsing API error: {response.content}") return False def comment_processor(comment): # escape html tags comment = re.sub(r"<", "<", comment) comment = re.sub(r">", ">", comment) # any text between ``` and ``` must be highlighted as code code_blocks = re.findall(r"```(.+?)```", comment, re.DOTALL) for code_block in code_blocks: if code_block.startswith("lang-"): language = code_block.split("\n")[0].replace("lang-", "") code_block = code_block.replace("lang-" + language + "\n", "") # comment = highlight_code_blocks(code_block.replace('<', '<').replace('>', '>'), language) comment = comment.replace( "```lang-" + language + "\n" + code_block + "```", highlight_code_blocks( code_block.replace("<", "<").replace(">", ">"), language ), ) else: comment = comment.replace( "```" + code_block + "```", highlight_code_blocks( code_block.replace("<", "<").replace(">", ">") ), ) # any http or https links must be converted to anchor tags links = re.findall(r"(https?://[^\s]+)", comment) for link in links: # check if the link is safe if check_link_safety(link): comment = comment.replace( link, '' + link + "" ) else: # do not replace the link if it is not safe. Add a warning message after the link instead comment = comment.replace( link, link + ' (Seems unsafe! Proceed with caution)', ) # retain line breaks, for every newline character, add a