gru/rustpad
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security upgrade

Browse Source
This commit is contained in:
Mateusz Gruszczyński
2026-07-30 09:57:43 +02:00
parent 2274cf57c9
commit f6b8e016a8
24 changed files with 1100 additions and 272 deletions
Download Patch File Download Diff File Expand all files Collapse all files
static/js/note-files.js
+5 -2
View File
@@ -74,7 +74,10 @@ export function bindNoteFiles({ editor, endpoints, getAccessToken, canDelete, to
}
}
document.querySelector("#upload-button").addEventListener("click", () => input.click());
document.querySelector("#upload-button").addEventListener("click", () => {
if (!getAuthToken()) { toast("Log in to upload files."); return; }
input.click();
});
input.addEventListener("change", async event => {
let file = event.target.files[0];
if (!file) return;
@@ -154,7 +157,7 @@ export function bindNoteFiles({ editor, endpoints, getAccessToken, canDelete, to
if (!deleteButton) return;
if (!await askConfirm(`Delete file "${deleteButton.dataset.fileName}" permanently?`, { title: "Delete file", confirmText: "Delete", danger: true })) return;
try {
await api(endpoints.remove(deleteButton.dataset.deleteFile), { method: "DELETE", headers: getAuthToken() ? { Authorization: `Bearer ${getAuthToken()}` } : {}, body: JSON.stringify({ access_token: getAccessToken() || null }) });
await api(endpoints.remove(deleteButton.dataset.deleteFile), { method: "DELETE", headers: {}, body: JSON.stringify({ access_token: getAccessToken() || null }) });
toast("File deleted");
await loadFiles();
} catch (error) { toast(error.message); }