@waline/vercel 1.12.0 → 1.13.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@waline/vercel",
-  "version": "1.12.0",
+  "version": "1.13.2",
   "description": "vercel server for waline comment system",
   "repository": "https://github.com/walinejs/waline",
   "license": "MIT",
@@ -31,7 +31,7 @@
     "think-logger3": "^1.3.1",
     "think-model": "^1.5.4",
     "think-model-mysql": "^1.1.7",
-    "think-model-postgresql": "^1.1.6",
+    "think-model-postgresql": "1.1.6",
     "think-model-sqlite": "^1.2.2",
     "think-mongo": "^2.1.2",
     "think-router-rest": "^1.0.5",

package/src/controller/db.js

@@ -1,6 +1,8 @@
-const fs = require('fs/promises');
+const fs = require('fs');
+const util = require('util');
 const BaseRest = require('./rest');
 
+const readFileAsync = util.promisify(fs.readFile);
 module.exports = class extends BaseRest {
   async getAction() {
     const exportData = {
@@ -17,7 +19,10 @@ module.exports = class extends BaseRest {
 
     for (let i = 0; i < exportData.tables.length; i++) {
       const tableName = exportData.tables[i];
-      const model = this.model(tableName);
+      const model = this.service(
+        `storage/${this.config('storage')}`,
+        tableName
+      );
       const data = await model.select({});
       exportData.data[tableName] = data;
     }
@@ -28,7 +33,7 @@ module.exports = class extends BaseRest {
   async postAction() {
     const file = this.file('file');
     try {
-      const jsonText = await fs.readFile(file.path, 'utf-8');
+      const jsonText = await readFileAsync(file.path, 'utf-8');
       const importData = JSON.parse(jsonText);
       if (!importData || importData.type !== 'waline') {
         return this.fail('import data format not support!');

package/src/controller/user/password.js

@@ -0,0 +1,46 @@
+const jwt = require('jsonwebtoken');
+const BaseRest = require('../rest');
+
+module.exports = class extends BaseRest {
+  async putAction() {
+    const {
+      SMTP_HOST,
+      SMTP_SERVICE,
+      SENDER_EMAIL,
+      SENDER_NAME,
+      SMTP_USER,
+      SITE_NAME,
+    } = process.env;
+    const hasMailServie = SMTP_HOST || SMTP_SERVICE;
+    if (!hasMailServie) {
+      return this.fail();
+    }
+
+    const { email } = this.post();
+    const userModel = this.service(
+      `storage/${this.config('storage')}`,
+      'Users'
+    );
+    const user = await userModel.select({ email });
+    if (think.isEmpty(user)) {
+      return this.fail();
+    }
+
+    const notify = this.service('notify');
+    const { protocol, host } = this.ctx;
+    const token = jwt.sign(user[0].email, this.config('jwtKey'));
+    const profileUrl = `${protocol}://${host}/ui/profile?token=${token}`;
+
+    await notify.transporter.sendMail({
+      from:
+        SENDER_EMAIL && SENDER_NAME
+          ? `"${SENDER_NAME}" <${SENDER_EMAIL}>`
+          : SMTP_USER,
+      to: user[0].email,
+      subject: `【${SITE_NAME || 'Waline'}】Reset Password`,
+      html: `Please click <a href="${profileUrl}">${profileUrl}</a> to login and change your password as soon as possible!`,
+    });
+
+    return this.success();
+  }
+};

package/src/logic/user/password.js

@@ -0,0 +1,11 @@
+const Base = require('../base');
+
+module.exports = class extends Base {
+  async putAction() {
+    this.rules = {
+      email: {
+        required: true,
+      },
+    };
+  }
+};

package/src/service/markdown/xss.js

@@ -9,7 +9,7 @@ const DOMPurify = createDOMPurify(new JSDOM('').window);
  */
 DOMPurify.addHook('afterSanitizeAttributes', function (node) {
   // set all elements owning target to target=_blank
-  if ('target' in node) {
+  if ('target' in node && node.href && !node.href.startsWith('about:blank#')) {
     node.setAttribute('target', '_blank');
     node.setAttribute('rel', 'noreferrer noopener');
   }

package/src/service/notify.js

@@ -335,7 +335,7 @@ module.exports = class extends think.Service {
     title = nunjucks.renderString(title, data);
     content = nunjucks.renderString(
       think.config('DiscordTemplate') ||
-        `💬 {{site.name|safe}}的文章《{{postName}}》有新评论啦 
+        `💬 {{site.name|safe}} 有新评论啦 
     【评论者昵称】：{{self.nick}}
     【评论者邮箱】：{{self.mail}} 
     【内容】：{{self.comment}}