nodebb-plugin-pdf-secure 1.2.9 → 1.2.11

package/library.js

@@ -36,8 +36,19 @@ plugin.init = async (params) => {
 
 	// PDF direct access blocker middleware
 	// Intercepts requests to uploaded PDF files and returns 403
-	router.get('/assets/uploads/files/:filename', (req, res, next) => {
+	// Admin and Global Moderators can bypass this restriction
+	router.get('/assets/uploads/files/:filename', async (req, res, next) => {
 		if (req.params.filename && req.params.filename.toLowerCase().endsWith('.pdf')) {
+			// Admin ve Global Mod'lar direkt erişebilsin
+			if (req.uid) {
+				const [isAdmin, isGlobalMod] = await Promise.all([
+					groups.isMember(req.uid, 'administrators'),
+					groups.isMember(req.uid, 'Global Moderators'),
+				]);
+				if (isAdmin || isGlobalMod) {
+					return next();
+				}
+			}
 			return res.status(403).json({ error: 'Direct PDF access is not allowed. Use the secure viewer.' });
 		}
 		next();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodebb-plugin-pdf-secure",
-  "version": "1.2.9",
+  "version": "1.2.11",
   "description": "Secure PDF viewer plugin for NodeBB - prevents downloading, enables canvas-only rendering with Premium group support",
   "main": "library.js",
   "repository": {

package/static/lib/main.js

@@ -215,6 +215,8 @@
 		targetElement.replaceWith(container);
 
 		// LAZY LOADING with Intersection Observer + Queue
+		// Smart loading: only loads PDFs that are actually visible
+		var queueEntry = null;  // Track if this PDF is in queue
 		var observer = new IntersectionObserver(function (entries) {
 			entries.forEach(function (entry) {
 				if (entry.isIntersecting) {
@@ -229,13 +231,36 @@
 						svgEl.innerHTML = '<path d="M12 4V2A10 10 0 0 0 2 12h2a8 8 0 0 1 8-8z"/>';
 					}
 
-					// Add to queue
-					queuePdfLoad(iframeWrapper, filename, loadingPlaceholder);
-					observer.disconnect();
+					// Add to queue (if not already)
+					if (!queueEntry) {
+						queueEntry = { wrapper: iframeWrapper, filename, placeholder: loadingPlaceholder };
+						loadQueue.push(queueEntry);
+						processQueue();
+					}
+				} else {
+					// LEFT viewport - remove from queue if waiting
+					if (queueEntry && loadQueue.includes(queueEntry)) {
+						var idx = loadQueue.indexOf(queueEntry);
+						if (idx > -1) {
+							loadQueue.splice(idx, 1);
+							console.log('[PDF-Secure] Queue: Removed (left viewport) -', filename);
+
+							// Reset placeholder to waiting state
+							var textEl = loadingPlaceholder.querySelector('.pdf-loading-text');
+							if (textEl) textEl.textContent = 'Sırada bekliyor...';
+							var svgEl = loadingPlaceholder.querySelector('svg');
+							if (svgEl) {
+								svgEl.style.fill = '#555';
+								svgEl.style.animation = 'none';
+								svgEl.innerHTML = '<path d="M14 2H6c-1.1 0-2 .9-2 2v16c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V8l-6-6zm4 18H6V4h7v5h5v11z"/>';
+							}
+						}
+						queueEntry = null;
+					}
 				}
 			});
 		}, {
-			rootMargin: '200px',
+			rootMargin: '0px',  // Only trigger when actually visible
 			threshold: 0
 		});