This PR pertains to the client-side validation of the Website input on user, repo, and org profiles. #12962 extends `[service].VALID_SITE_URL_SCHEMES` to cover Website fields on repo and org profiles, where before that config key only applied to the one on user profiles. If that change merges, it will then be possible to construct an HTML [`pattern`](https://developer.mozilla.org/docs/Web/HTML/Reference/Elements/input#pattern) attribute for general use on any Website form input that the server validates this way, thus enabling browsers to catch errors early relating to URL scheme confusion. This PR (1) introduces such a `pattern` attribute, and (2) adds a new UI note to make clear to users which URL schemes are permitted. This change helps explain the browser's otherwise cryptic error messages regarding pattern mismatch, while also letting users know what URI schemes the Forgejo instance supports as Website links (e.g. gemini:// URLs).  This MUST NOT merge before #12962. To do so would introduce a regression wherein the UI may suggest and validate a different set of allowed URL schemes than the server actually permits. See also #5519 Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/12991 Reviewed-by: 0ko <0ko@noreply.codeberg.org>
248 lines
12 KiB
Go HTML Template
248 lines
12 KiB
Go HTML Template
{{template "admin/layout_head" (dict "ctxData" . "pageClass" "admin edit user")}}
|
|
<div class="admin-setting-content">
|
|
<h4 class="ui top attached header">
|
|
{{ctx.Locale.Tr "admin.users.edit_account"}}
|
|
</h4>
|
|
<div class="ui attached segment">
|
|
<form class="ui form" action="./edit" method="post">
|
|
{{template "base/disable_form_autofill"}}
|
|
<div class="field {{if .Err_UserName}}error{{end}}">
|
|
<label for="user_name">{{ctx.Locale.Tr "username"}}</label>
|
|
<input id="user_name" name="user_name" value="{{.User.Name}}" autofocus {{if not .User.IsLocal}}disabled{{end}} maxlength="40" autocorrect="off" autocapitalize="none">
|
|
</div>
|
|
<!-- Types and name -->
|
|
<div class="inline required field {{if .Err_LoginType}}error{{end}}">
|
|
<label>{{ctx.Locale.Tr "admin.users.auth_source"}}</label>
|
|
<div class="ui selection type dropdown">
|
|
<input type="hidden" id="login_type" name="login_type" value="{{.LoginSource.Type.Int}}-{{.LoginSource.ID}}" required>
|
|
<div class="text">{{ctx.Locale.Tr "admin.users.local"}}</div>
|
|
{{svg "octicon-triangle-down" 14 "dropdown icon"}}
|
|
<div class="menu">
|
|
<div class="item" data-value="0-0">{{ctx.Locale.Tr "admin.users.local"}}</div>
|
|
{{range .Sources}}
|
|
<div class="item" data-value="{{.Type.Int}}-{{.ID}}">{{.Name}}</div>
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="inline field {{if .Err_Visibility}}error{{end}}">
|
|
<span class="inline required field"><label for="visibility">{{ctx.Locale.Tr "settings.visibility"}}</label></span>
|
|
<div class="ui selection type dropdown">
|
|
{{if .User.Visibility.IsPublic}}<input type="hidden" id="visibility" name="visibility" value="0">{{end}}
|
|
{{if .User.Visibility.IsLimited}}<input type="hidden" id="visibility" name="visibility" value="1">{{end}}
|
|
{{if .User.Visibility.IsPrivate}}<input type="hidden" id="visibility" name="visibility" value="2">{{end}}
|
|
<div class="text">
|
|
{{if .User.Visibility.IsPublic}}{{ctx.Locale.Tr "settings.visibility.public"}}{{end}}
|
|
{{if .User.Visibility.IsLimited}}{{ctx.Locale.Tr "settings.visibility.limited"}}{{end}}
|
|
{{if .User.Visibility.IsPrivate}}{{ctx.Locale.Tr "settings.visibility.private"}}{{end}}
|
|
</div>
|
|
{{svg "octicon-triangle-down" 14 "dropdown icon"}}
|
|
<div class="menu">
|
|
{{range $mode := .AllowedUserVisibilityModes}}
|
|
{{if $mode.IsPublic}}
|
|
<div class="item" data-tooltip-content="{{ctx.Locale.Tr "settings.visibility.public_tooltip"}}" data-value="0">{{ctx.Locale.Tr "settings.visibility.public"}}</div>
|
|
{{else if $mode.IsLimited}}
|
|
<div class="item" data-tooltip-content="{{ctx.Locale.Tr "settings.visibility.limited_tooltip"}}" data-value="1">{{ctx.Locale.Tr "settings.visibility.limited"}}</div>
|
|
{{else if $mode.IsPrivate}}
|
|
<div class="item" data-tooltip-content="{{ctx.Locale.Tr "settings.visibility.private_tooltip"}}" data-value="2">{{ctx.Locale.Tr "settings.visibility.private"}}</div>
|
|
{{end}}
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="required non-local field {{if .Err_LoginName}}error{{end}} {{if eq .User.LoginSource 0}}tw-hidden{{end}}">
|
|
<label for="login_name">{{ctx.Locale.Tr "admin.users.auth_login_name"}}</label>
|
|
<input id="login_name" name="login_name" value="{{.User.LoginName}}" autofocus>
|
|
</div>
|
|
<div class="field {{if .Err_FullName}}error{{end}}">
|
|
<label for="full_name">{{ctx.Locale.Tr "settings.full_name"}}</label>
|
|
<input id="full_name" name="full_name" value="{{.User.FullName}}" maxlength="100">
|
|
</div>
|
|
<div class="field">
|
|
<label for="pronouns">{{ctx.Locale.Tr "settings.pronouns"}}</label>
|
|
<input id="pronouns" name="pronouns" value="{{.User.Pronouns}}" maxlength="50">
|
|
</div>
|
|
<div class="required field {{if .Err_Email}}error{{end}}">
|
|
<label for="email">{{ctx.Locale.Tr "email"}}</label>
|
|
<input id="email" name="email" type="email" value="{{.User.Email}}" autofocus required>
|
|
</div>
|
|
<div class="inline field">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "settings.keep_email_private"}}</label>
|
|
<input name="hide_email" type="checkbox" {{if .User.KeepEmailPrivate}}checked{{end}}>
|
|
</div>
|
|
<span class="help">{{ctx.Locale.Tr "settings.keep_email_private_popup" .User.GetPlaceholderEmail}}</span>
|
|
</div>
|
|
<div class="local field {{if .Err_Password}}error{{end}} {{if not (or (.User.IsLocal) (.User.IsOAuth2))}}tw-hidden{{end}}">
|
|
<label for="password">{{ctx.Locale.Tr "password"}}</label>
|
|
<input id="password" name="password" type="password" autocomplete="new-password">
|
|
<p class="help">{{ctx.Locale.Tr "admin.users.password_helper"}}</p>
|
|
</div>
|
|
|
|
<div class="field {{if .Err_Language}}error{{end}}">
|
|
<label for="language">{{ctx.Locale.Tr "settings.language"}}</label>
|
|
<div class="ui selection dropdown">
|
|
<input name="language" type="hidden" value="{{.User.Language}}">
|
|
{{svg "octicon-triangle-down" 14 "dropdown icon"}}
|
|
<div class="text">{{range .AllLangs}}{{if eq $.User.Language .Lang}}{{.Name}}{{end}}{{end}}</div>
|
|
<div class="menu">
|
|
{{range .AllLangs}}
|
|
<div class="item{{if eq $.User.Language .Lang}} active selected{{end}}" data-value="{{.Lang}}">{{.Name}}</div>
|
|
{{end}}
|
|
</div>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="field {{if .Err_Website}}error{{end}}">
|
|
<label for="website">{{ctx.Locale.Tr "settings.website"}}</label>
|
|
<input id="website" name="website" type="url" value="{{.User.Website}}" maxlength="255" pattern="{{.ValidSiteURLPattern}}">
|
|
<span class="help">{{ctx.Locale.Tr "form.website.valid_url_schemes" (StringUtils.Join .ValidSiteURLSchemes ", ")}}</span>
|
|
</div>
|
|
<div class="field {{if .Err_Location}}error{{end}}">
|
|
<label for="location">{{ctx.Locale.Tr "settings.location"}}</label>
|
|
<input id="location" name="location" value="{{.User.Location}}" maxlength="50">
|
|
</div>
|
|
|
|
<div class="divider"></div>
|
|
|
|
<div class="inline field {{if .Err_MaxRepoCreation}}error{{end}}">
|
|
<label for="max_repo_creation">{{ctx.Locale.Tr "admin.users.max_repo_creation"}}</label>
|
|
<input id="max_repo_creation" name="max_repo_creation" type="number" min="-1" value="{{.User.MaxRepoCreation}}">
|
|
<p class="help">{{ctx.Locale.Tr "admin.users.max_repo_creation_desc"}}</p>
|
|
</div>
|
|
|
|
<div class="divider"></div>
|
|
|
|
<div class="inline field">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "admin.users.is_activated"}}</label>
|
|
<input name="active" type="checkbox" {{if .User.IsActive}}checked{{end}}>
|
|
</div>
|
|
<span class="help tw-block">{{ctx.Locale.Tr "admin.users.activated.description"}}</span>
|
|
</div>
|
|
<div class="inline field">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "admin.users.prohibit_login"}}</label>
|
|
<input name="prohibit_login" type="checkbox" {{if .User.ProhibitLogin}}checked{{end}} {{if (eq .User.ID .SignedUserID)}}disabled{{end}}>
|
|
</div>
|
|
<span class="help tw-block">{{ctx.Locale.Tr "admin.users.block.description"}}</span>
|
|
</div>
|
|
<div class="inline field">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "admin.users.is_admin"}}</label>
|
|
<input name="admin" type="checkbox" {{if .User.IsAdmin}}checked{{end}}>
|
|
</div>
|
|
<span class="help tw-block">{{ctx.Locale.Tr "admin.users.admin.description"}}</span>
|
|
</div>
|
|
<div class="inline field">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "admin.users.is_restricted"}}</label>
|
|
<input name="restricted" type="checkbox" {{if .User.IsRestricted}}checked{{end}}>
|
|
</div>
|
|
<span class="help tw-block">{{ctx.Locale.Tr "admin.users.restricted.description"}}</span>
|
|
</div>
|
|
<div class="inline field {{if DisableGitHooks}}tw-hidden{{end}}">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "admin.users.allow_git_hook"}}</label>
|
|
<input name="allow_git_hook" type="checkbox" {{if .User.CanEditGitHook}}checked{{end}} {{if DisableGitHooks}}disabled{{end}}>
|
|
</div>
|
|
<span class="help tw-block">{{ctx.Locale.Tr "admin.users.allow_git_hook_tooltip"}}</span>
|
|
</div>
|
|
<div class="inline field {{if or (DisableImportLocal) (.DisableMigrations)}}tw-hidden{{end}}">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "admin.users.allow_import_local"}}</label>
|
|
<input name="allow_import_local" type="checkbox" {{if .User.CanImportLocal}}checked{{end}} {{if DisableImportLocal}}disabled{{end}}>
|
|
</div>
|
|
<span class="help tw-block">{{ctx.Locale.Tr "admin.users.local_import.description"}}</span>
|
|
</div>
|
|
{{if not .DisableRegularOrgCreation}}
|
|
<div class="inline field">
|
|
<div class="ui checkbox">
|
|
<label>{{ctx.Locale.Tr "admin.users.allow_create_organization"}}</label>
|
|
<input name="allow_create_organization" type="checkbox" {{if .User.CanCreateOrganization}}checked{{end}}>
|
|
</div>
|
|
<span class="help tw-block">{{ctx.Locale.Tr "admin.users.organization_creation.description"}}</span>
|
|
</div>
|
|
{{end}}
|
|
|
|
{{if .TwoFactorEnabled}}
|
|
<div class="divider"></div>
|
|
<div class="inline field">
|
|
<div class="ui checkbox">
|
|
<label><strong>{{ctx.Locale.Tr "admin.users.reset_2fa"}}</strong></label>
|
|
<input name="reset_2fa" type="checkbox">
|
|
</div>
|
|
</div>
|
|
{{end}}
|
|
|
|
<div class="divider"></div>
|
|
|
|
<div class="field">
|
|
<button class="ui primary button">{{ctx.Locale.Tr "admin.users.update_profile"}}</button>
|
|
<button class="ui red button show-modal" data-modal="#delete-user-modal">{{ctx.Locale.Tr "admin.users.delete_account"}}</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
|
|
<h4 class="ui top attached header">
|
|
{{ctx.Locale.Tr "settings.avatar"}}
|
|
</h4>
|
|
<div class="ui attached segment">
|
|
<form class="ui form" action="./avatar" method="post" enctype="multipart/form-data">
|
|
{{if not .DisableGravatar}}
|
|
<div class="inline field">
|
|
<div class="ui radio checkbox">
|
|
<input name="source" value="lookup" type="radio" {{if not .User.UseCustomAvatar}}checked{{end}}>
|
|
<label>{{ctx.Locale.Tr "settings.lookup_avatar_by_mail"}}</label>
|
|
</div>
|
|
</div>
|
|
<div class="field tw-pl-4 {{if .Err_Gravatar}}error{{end}}">
|
|
<label for="gravatar">Avatar {{ctx.Locale.Tr "email"}}</label>
|
|
<input id="gravatar" name="gravatar" value="{{.User.AvatarEmail}}">
|
|
</div>
|
|
{{end}}
|
|
|
|
<div class="inline field">
|
|
<div class="ui radio checkbox">
|
|
<input name="source" value="local" type="radio" {{if .User.UseCustomAvatar}}checked{{end}}>
|
|
<label>{{ctx.Locale.Tr "settings.enable_custom_avatar"}}</label>
|
|
</div>
|
|
</div>
|
|
|
|
<div class="inline field tw-pl-4">
|
|
<label for="avatar">{{ctx.Locale.Tr "settings.choose_new_avatar"}}</label>
|
|
<input name="avatar" type="file" accept="image/png,image/jpeg,image/gif,image/webp">
|
|
<br/><span class=help>{{ctx.Locale.Tr "avatar.constraints_hint" (ctx.Locale.TrSize .MaxAvatarFileSize) .MaxAvatarWidth .MaxAvatarHeight}}</span>
|
|
</div>
|
|
|
|
<div class="field button-sequence">
|
|
<button class="primary button">{{ctx.Locale.Tr "settings.update_avatar"}}</button>
|
|
<button class="danger button link-action" data-url="./avatar/delete">{{ctx.Locale.Tr "settings.delete_current_avatar"}}</button>
|
|
</div>
|
|
</form>
|
|
</div>
|
|
</div>
|
|
|
|
<dialog id="delete-user-modal">
|
|
<article>
|
|
<header>{{svg "octicon-trash"}} {{ctx.Locale.Tr "settings.delete_account_title"}}</header>
|
|
<form class="ui form" method="post" action="./delete">
|
|
<div class="content">
|
|
<p>{{ctx.Locale.Tr "settings.delete_account_desc"}}</p>
|
|
<div class="field">
|
|
<div class="ui checkbox">
|
|
<label for="purge">{{ctx.Locale.Tr "admin.users.purge"}}</label>
|
|
<input name="purge" type="checkbox">
|
|
</div>
|
|
<p class="help">{{ctx.Locale.Tr "admin.users.purge_help"}}</p>
|
|
</div>
|
|
</div>
|
|
{{template "base/modal_actions_confirm" .}}
|
|
</form>
|
|
</article>
|
|
</dialog>
|
|
|
|
{{template "admin/layout_footer" .}}
|